PT-2019-4060
CVE-2019-0154
·
تاريخ النشر
2019-11-05
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Intel(R) Core(TM) Processor Families versions 6th through 9th
Intel(R) Pentium(R) Processor J, N, Silver and Gold Series
Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series
Intel(R) Atom(R) Processor A and E3900 Series
Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families
Description
The issue is related to insufficient access control in a subsystem for Intel processor graphics, which may allow an authenticated user to potentially enable denial of service via local access. The vulnerability exists due to inadequate input validation, and its exploitation can lead to a denial of service.
Recommendations
For Intel(R) Core(TM) Processor Families versions 6th through 9th: Update to a version with improved access control.
For Intel(R) Pentium(R) Processor J, N, Silver and Gold Series: Apply configuration changes to restrict local access.
For Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series: Disable vulnerable subsystems until a patch is available.
For Intel(R) Atom(R) Processor A and E3900 Series: Restrict input validation to prevent exploitation.
For Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families: Implement additional security measures to prevent denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾