Intel Corporation Intel Graphics Driver
En bref
- Source
- NVD
- EPSS
- EPSS 0.48 % · centile 42 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- intel
- Statut NVD
- Modified
Description
Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user to potentially create an infinite loop and crash an application via local access.
Faiblesses (CWE)
- CWE-835 — Boucle dont la condition de sortie est inatteignable (boucle infinie)
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.0 | MEDIUM 5.5 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | LOW 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2018-4132
- GCVE · GCVE-0-2018-12154
Avis du CERT-FR
- CERTFR-2019-AVI-539 — Multiples vulnérabilités dans les produits Apple · cert.ssi.gouv.fr
- CERTFR-2018-AVI-489 — Multiples vulnérabilités dans les produits Intel · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:intel:graphics_driver:15.33.43.4425:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.33.45.4653:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.33.46.4885:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.36.26.4294:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.36.28.4332:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.36.31.4414:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.36.33.4578:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.36.34.4889:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.40.34.4624:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.40.36.4703:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.40.37.4835:*:*:*:*:*:*:*cpe:2.3:o:intel:graphics_driver:15.40.38.4963:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Intel Corporation · Intel Graphics Driver | affected Various |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |