Lucene search

[email protected]CVE-2019-11112

HistoryNov 14, 2019 - 7:15 p.m.

CVE-2019-11112

2019-11-1419:15:00

CWE-787

[email protected]

web.nvd.nist.gov

cve-2019-11112

memory corruption

kernel mode driver

intel graphics driver

privilege escalation

local access

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.8%

JSON

Memory corruption in Kernel Mode Driver in Intel® Graphics Driver before 26.20.100.6813 (DCH) or 26.20.100.6812 may allow an authenticated user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
intel:graphics_driverintel graphics driverlt15.45.5077
intel:graphics_driverintel graphics driverlt26.20.100.6812
netapp:cloud_backupnetapp cloud backupeq-
netapp:steelstore_cloud_integrated_storagenetapp steelstore cloud integrated storageeq-
netapp:data_availability_servicesnetapp data availability serviceseq-

CPE	Name	Operator	Version
intel:graphics_driver	intel graphics driver	lt	15.45.5077
intel:graphics_driver	intel graphics driver	lt	26.20.100.6812
netapp:cloud_backup	netapp cloud backup	eq	-
netapp:steelstore_cloud_integrated_storage	netapp steelstore cloud integrated storage	eq	-
netapp:data_availability_services	netapp data availability services	eq	-

References

security.netapp.com/advisory/ntap-20200320-0005/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2019-11112

prion1 nessus1 freebsd1 lenovo2 intel1 hp1