Ubuntu 16.04 LTS / 18.04 LTS : QEMU vulnerabilities (USN-4191-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4191-1 advisory. It was discovered that the LSI SCSI adapter emulator implementation in QEMU did not properly validate executed scripts. A local attacker coul...

Vulnerability Spotlight: Denial-of-service vulnerability in Intel IGC64 graphics driver

Piotr Bania of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Intel’s IGC64.dll graphics driver contains a denial-of-service vulnerability. An attacker could exploit this bug by supplying a malformed pixel shader if the graphics driver is operating inside a VMware guest operating...

Intel IGC64.DLL shader functionality DCL_INDEXABLE_TEMP denial-of-service vulnerability

Summary An exploitable memory corruption vulnerability exists in Intel’s IGC64.DLL graphics driver, versions 26.20.100.6709 and 26.20.100.6861. A specially crafted pixel shader can cause an out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this...

UBUNTU-CVE-2019-0155

Insufficient access control in a subsystem for Intel R processor graphics in 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR PentiumR Processor J, N, Silver and Gold Series; IntelR CeleronR Processor J, N, G3900 and G4900 Series; IntelR AtomR Processor A and E3900 Series...

CVE-2019-0155

Insufficient access control in a subsystem for Intel R processor graphics in 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR PentiumR Processor J, N, Silver and Gold Series; IntelR CeleronR Processor J, N, G3900 and G4900 Series; IntelR AtomR Processor A and E3900 Series...

PT-2019-4043 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver versions prior to 26.20.100.7209 Description: The issue is related to an out of bounds read in a subsystem of the Intel Graphics Driver, which may allow an authenticated user to potentially enable denial of service via...

Multiple Intel Products CVE-2019-0155 Local Privilege Escalation Vulnerability

Description Multiple Intel Products are prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges, obtain sensitive information, cause memory corruption or denial-of-service conditions. Technologies Affected Intel 6th generation Core...

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the following Intel advisories and apply the necessary updates: BMC Advisory INTEL-SA-00313 UEFI Advisory...

PT-2019-4045 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver versions prior to 26.20.100.7209 Description: The issue is related to improper input validation in the API for the IntelR Graphics Driver, which may allow an authenticated user to potentially enable denial of service vi...

PT-2019-4046 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: Intel Graphics Driver versions prior to 25.20.100.6519 Description: The issue is related to insufficient input validation in the Kernel Mode module of the Intel Graphics Driver. This can potentially allow an authenticated user to cause a deni...

PT-2019-4047 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: Intel Graphics Driver versions prior to 25.20.100.6618 DCH or 21.20.x.5077 aka 15.45.5077 Description: The issue is related to a buffer overflow in the Kernel Mode module of the Intel Graphics Driver, which may allow a privileged user to enab...

2019.2 IPU – Intel® Graphics Driver for Windows* and Linux Advisory

Summary: Potential security vulnerabilities in Intel® Graphics Driver for Windows and Linux may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-11112 Description: Memory corruption in Kernel Mode Driv...

Multiple Intel Products CVE-2019-0154 Denial of Service Vulnerability

Description Multiple Intel Products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. Technologies Affected Intel 6th generation Core processors Intel 7th generation Core processors Intel 8th generation Core processors Intel...

PT-2019-4044 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver versions prior to 26.20.100.7209 Description: The issue is related to improper access control in the API for the IntelR Graphics Driver, which may allow an authenticated user to potentially enable information disclosure...

NVIDIA Windows GPU Display Driver Elevation of Privilege and Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. An elevation of privilege and denial of service vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display...

NVIDIA Windows GPU Display Driver Code Execution Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A code execution vulnerability exists in the NVIDIA Control Panel of the NVIDIA Windows GPU Display Driver. The vulnerability stems from the NVIDIA control panel...

CVE-2019-5701

NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel graphics driver DLLs without validating the path or signature also known as a binary planting or DLL preloading attack,...

Design/Logic Flaw

NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel graphics driver DLLs without validating the path or signature also known as a binary planting or DLL preloading attack,...

CVE-2019-5701

CVE-2019-5701 affects NVIDIA GeForce Experience (all versions prior to 3.20.0.118). The issue arises when GameStream is enabled: an attacker with local access can cause binary planting by loading Intel graphics driver DLLs without validating the path or signature, potentially leading to denial of...

Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2019-41302)

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers. Graphics Drivers is one of the graphics driver...