2019.2 IPU – Intel(R) Processor Graphics Update
At a glance
- Source
- NVD
- EPSS
- EPSS 0.65 % · percentile 51 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- intel
- NVD status
- Modified
Description
Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00260.html
- https://seclists.org/bugtraq/2019/Nov/26
- http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
- https://support.f5.com/csp/article/K73659122?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/4186-2/
- https://access.redhat.com/errata/RHSA-2020:0204
- https://security.netapp.com/advisory/ntap-20200320-0004/
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | LOW 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2019-0961
- GCVE · GCVE-0-2019-0154
CERT-FR advisories
- CERTFR-2026-AVI-0326 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0316 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2022-AVI-267 — Multiples vulnérabilités dans Juniper Networks Junos Space · cert.ssi.gouv.fr
- CERTFR-2020-AVI-056 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
- CERTFR-2020-AVI-029 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-652 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-639 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-635 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-632 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-612 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-575 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-571 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
- CERTFR-2019-AVI-563 — Multiples vulnérabilités dans les microgiciels Intel · cert.ssi.gouv.fr
- CERTFR-2019-AVI-561 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-555 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2019-AVI-554 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*cpe:2.3:o:intel:pentium_j4205_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:pentium_n4200_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:celeron_j3355_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:celeron_j3455_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:celeron_n3350_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:celeron_n3450_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:atom_x5-a3930_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:atom_x5-a3940_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:atom_x7-a3950_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:pentium_silver_j5005_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:pentium_silver_n5000_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:celeron_j4005_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:celeron_j4105_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:celeron_n4000_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:celeron_n4100_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6970hq_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6920hq_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6870hq_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6822eq_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6820hq_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6820hk_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6820eq_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6785r_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6700k_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6700t_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6700te_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6700_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6770hq_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6700hq_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6660u_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6650u_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6600u_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6567u_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6560u_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:core_i7-6500u_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:xeon_e3-1585_v5_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:xeon_e3-1585l_v5_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:xeon_e3-1578l_v5_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859cpe:2.3:o:intel:xeon_e3-1575m_v5_firmware:*:*:*:*:*:windows:*:*< 26.20.100.6859- +110 more
Affected products
| Product | Versions |
|---|---|
| 2019.2 IPU – Intel(R) Processor Graphics Update | affected See provided reference |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |