Lucene search

K
cveIntelCVE-2018-3661
HistoryMay 15, 2018 - 2:29 p.m.

CVE-2018-3661

2018-05-1514:29:00
CWE-119
intel
web.nvd.nist.gov
59
cve-2018-3661
buffer overflow
intel
system configuration utilities
selview.exe
syscfg.exe
denial of service
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

0

Percentile

5.1%

Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash these services potentially resulting in a denial of service.

Affected configurations

Nvd
Vulners
Node
intelsyscfgRange<14.0
Node
intelselviewRange<14.0
VendorProductVersionCPE
intelsyscfg*cpe:2.3:a:intel:syscfg:*:*:*:*:*:*:*:*
intelselview*cpe:2.3:a:intel:selview:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "System Configuration Utilities",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "before version 14 build 11"
      }
    ]
  }
]

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2018-3661