Lucene search

PRIOn knowledge basePRION:CVE-2018-12216

HistoryMar 14, 2019 - 8:29 p.m.

Input validation

2019-03-1420:29:00

PRIOn knowledge base

www.prio-n.com

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.6%

JSON

Insufficient input validation in Kernel Mode Driver in Intel® Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access.

CPENameOperatorVersion
graphics_drivereq15.33.43.4425
graphics_drivereq15.33.45.4653
graphics_drivereq15.33.46.4885
graphics_drivereq15.36.26.4294
graphics_drivereq15.36.28.4332
graphics_drivereq15.36.31.4414
graphics_drivereq15.36.33.4578
graphics_drivereq15.36.34.4889
graphics_drivereq15.40.34.4624
graphics_drivereq15.40.36.4703

Name	Operator	Version
graphics_driver	eq	15.33.43.4425
graphics_driver	eq	15.33.45.4653
graphics_driver	eq	15.33.46.4885
graphics_driver	eq	15.36.26.4294
graphics_driver	eq	15.36.28.4332
graphics_driver	eq	15.36.31.4414
graphics_driver	eq	15.36.33.4578
graphics_driver	eq	15.36.34.4889
graphics_driver	eq	15.40.34.4624
graphics_driver	eq	15.40.36.4703

Rows per page:

1-10 of 231

References

support.lenovo.com/us/en/product_security/LEN-25084

www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.6%

JSON

Related for PRION:CVE-2018-12216