Lucene search

[email protected]CVE-2017-5692

HistoryAug 01, 2018 - 3:29 p.m.

CVE-2017-5692

2018-08-0115:29:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2017-5692

out-of-bounds read

intel graphics driver

windows

local users

denial of service

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Out-of-bounds read condition in older versions of some Intel Graphics Driver for Windows code branches allows local users to perform a denial of service attack.

Affected configurations

NVD

Node

intelgraphics_driverMatch15.36.19.64.4170

intelgraphics_driverMatch15.36.19.4170

intelgraphics_driverMatch15.36.21.64.4223

intelgraphics_driverMatch15.36.21.4222

intelgraphics_driverMatch15.36.23.64.4251

intelgraphics_driverMatch15.36.23.4251

intelgraphics_driverMatch15.36.24.64.4264

intelgraphics_driverMatch15.36.24.4264

intelgraphics_driverMatch15.36.26.4294

intelgraphics_driverMatch15.36.28.4332

intelgraphics_driverMatch15.36.29.64.4371

intelgraphics_driverMatch15.36.31.4414

intelgraphics_driverMatch15.36.33.4578

intelgraphics_driverMatch15.36.34.4889

intelgraphics_driverMatch15.36.35.5057

intelgraphics_driverMatch15.40.0.64.4279

intelgraphics_driverMatch15.40.10.4300

intelgraphics_driverMatch15.40.28.64.4501

intelgraphics_driverMatch15.40.34.4624

intelgraphics_driverMatch15.45.9.64.4534

CPENameOperatorVersion
intel:graphics_driverintel graphics drivereq15.36.19.64.4170
intel:graphics_driverintel graphics drivereq15.36.19.4170
intel:graphics_driverintel graphics drivereq15.36.21.64.4223
intel:graphics_driverintel graphics drivereq15.36.21.4222
intel:graphics_driverintel graphics drivereq15.36.23.64.4251
intel:graphics_driverintel graphics drivereq15.36.23.4251
intel:graphics_driverintel graphics drivereq15.36.24.64.4264
intel:graphics_driverintel graphics drivereq15.36.24.4264
intel:graphics_driverintel graphics drivereq15.36.26.4294
intel:graphics_driverintel graphics drivereq15.36.28.4332

CPE	Name	Operator	Version
intel:graphics_driver	intel graphics driver	eq	15.36.19.64.4170
intel:graphics_driver	intel graphics driver	eq	15.36.19.4170
intel:graphics_driver	intel graphics driver	eq	15.36.21.64.4223
intel:graphics_driver	intel graphics driver	eq	15.36.21.4222
intel:graphics_driver	intel graphics driver	eq	15.36.23.64.4251
intel:graphics_driver	intel graphics driver	eq	15.36.23.4251
intel:graphics_driver	intel graphics driver	eq	15.36.24.64.4264
intel:graphics_driver	intel graphics driver	eq	15.36.24.4264
intel:graphics_driver	intel graphics driver	eq	15.36.26.4294
intel:graphics_driver	intel graphics driver	eq	15.36.28.4332

Rows per page:

1-10 of 201

CNA Affected

[
  {
    "product": "Mobile, Desktop, Server, Workstation, and Embedded processors based on Intel Core and Atom Processors using an affected driver.",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ]
  }
]

References

www.securityfocus.com/bid/104957

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00077.html

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2017-5692

cvelist1 nvd1 prion1 lenovo2