PT-2021-1997 · Intel+1 · Intel Graphics Drivers+1

Steffen Schulz + 1 · Published 2021-02-09 · Updated 2021-07-21 · CVE-2020-12373

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 26.20.100.8141

Description The issue is related to an expired pointer dereference in some Intel Graphics Drivers, which may allow a privileged user to potentially enable a denial of service via local access. This could result in a service disruption.

Recommendations For versions prior to 26.20.100.8141, update to version 26.20.100.8141 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-825

CWE-119

Related Identifiers

BDU:2021-00827

CVE-2020-12373

OPENSUSE-SU-2021:0393-1

OPENSUSE-SU-2021:0407-1

OPENSUSE-SU-2021_0393-1

OPENSUSE-SU-2021_0407-1

SUSE-SU-2021:0694-1

SUSE-SU-2021:0735-1

SUSE-SU-2021:0738-1

SUSE-SU-2021:0741-1

Affected Products

Intel Graphics Drivers

Suse

References · 154

• https://nvd.nist.gov/vuln/detail/CVE-2020-12373 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2021:0407-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0738-1 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00827 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12373 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0393-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0694-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0741-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0735-1 · Vendor Advisory
• https://bugzilla.suse.com/1182459 · Note
• https://bugzilla.suse.com/1182650 · Note
• https://bugzilla.suse.com/1182446 · Note
• https://bugzilla.suse.com/1180989 · Note
• https://bugzilla.suse.com/1182684 · Note