Lucene search

[email protected]CVE-2017-5696

HistoryJan 18, 2018 - 1:29 a.m.

CVE-2017-5696

2018-01-1801:29:00

CWE-426

[email protected]

web.nvd.nist.gov

cve-2017-5696

intel graphics driver

privilege elevation

local access

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

27.2%

JSON

Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access.

Affected configurations

Vulners

NVD

Node

intelgraphics_driverRange<15.40

intelgraphics_driverRange<15.45

intelgraphics_driverRange<21.20

CPENameOperatorVersion
intel:graphics_driverintel graphics driverlt21.20.16.4860
intel:graphics_driverintel graphics drivereq15.40.1.64.4256
intel:graphics_driverintel graphics drivereq15.40.4.64.4256
intel:graphics_driverintel graphics drivereq15.40.7.64.4279
intel:graphics_driverintel graphics drivereq15.40.14.4352
intel:graphics_driverintel graphics drivereq15.40.26.4474
intel:graphics_driverintel graphics drivereq15.40.34.4624
intel:graphics_driverintel graphics drivereq15.40.36.4703
intel:graphics_driverintel graphics drivereq15.40.37.4835
intel:graphics_driverintel graphics drivereq15.45.18.4664

CPE	Name	Operator	Version
intel:graphics_driver	intel graphics driver	lt	21.20.16.4860
intel:graphics_driver	intel graphics driver	eq	15.40.1.64.4256
intel:graphics_driver	intel graphics driver	eq	15.40.4.64.4256
intel:graphics_driver	intel graphics driver	eq	15.40.7.64.4279
intel:graphics_driver	intel graphics driver	eq	15.40.14.4352
intel:graphics_driver	intel graphics driver	eq	15.40.26.4474
intel:graphics_driver	intel graphics driver	eq	15.40.34.4624
intel:graphics_driver	intel graphics driver	eq	15.40.36.4703
intel:graphics_driver	intel graphics driver	eq	15.40.37.4835
intel:graphics_driver	intel graphics driver	eq	15.45.18.4664

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "product": "Intel Graphics Driver",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "15.40.x.x"
      },
      {
        "status": "affected",
        "version": "15.45.x.x"
      },
      {
        "status": "affected",
        "version": "21.20.x.x"
      }
    ]
  }
]

References

security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00080&languageid=en-fr

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

27.2%

JSON

Related for CVE-2017-5696

cvelist1 intel1 prion1 nvd1 lenovo2