Lucene search

K
lenovoLenovoLENOVO:PS500276-NOSID
HistoryNov 04, 2019 - 2:48 p.m.

Intel Graphics Vulnerabilities - Lenovo Support US

2019-11-0414:48:49
support.lenovo.com
35

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

Lenovo Security Advisory: LEN-28235

**Potential Impact:**Escalation of Privilege, Denial of Service, Information Disclosure

Severity: High

Scope of Impact: Industry-wide

CVE Identifier: CVE-2019-0154, CVE-2019-0155, , CVE-2019-11089, CVE-2019-11111, CVE-2019-11112, CVE-2019-11113, CVE-2019-14574, CVE-2019- 14590, CVE-2019-14591

Summary Description:

Intel reported potential security vulnerabilities in Intel Graphics Driver for Windows and Intel Processor Graphics which may lead to denial of service.

Mitigation Strategy for Customers (what you should do to protect yourself):

Intel recommends updating the Intel Graphics Driver for Windows to the latest version as indicated for your model in the Product Impact section below.

For BIOS/microcode Firmware updates, refer to LEN-27714: Multi-vendor BIOS Security Vulnerabilities


Product Impact:

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C