2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux
At a glance
- Source
- NVD
- EPSS
- EPSS 0.67 % · percentile 52 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- intel
- NVD status
- Modified
Description
Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.
References
- https://access.redhat.com/errata/RHSA-2019:3841
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html
- https://access.redhat.com/errata/RHSA-2019:3889
- https://access.redhat.com/errata/RHSA-2019:3887
- https://seclists.org/bugtraq/2019/Nov/26
- http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
- https://access.redhat.com/errata/RHSA-2019:3908
- https://support.f5.com/csp/article/K73659122?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/4186-2/
- https://access.redhat.com/errata/RHSA-2020:0204
- https://security.netapp.com/advisory/ntap-20200320-0005/
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2019-0962
- GCVE · GCVE-0-2019-0155
CERT-FR advisories
- CERTFR-2022-AVI-267 — Multiples vulnérabilités dans Juniper Networks Junos Space · cert.ssi.gouv.fr
- CERTFR-2020-AVI-548 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2020-AVI-056 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
- CERTFR-2020-AVI-029 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-635 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-632 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-612 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-579 — Vulnérabilité dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
- CERTFR-2019-AVI-575 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-571 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
- CERTFR-2019-AVI-564 — Multiples vulnérabilités dans les logiciels Intel · cert.ssi.gouv.fr
- CERTFR-2019-AVI-561 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2019-AVI-555 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:windows:*:*< 26.20.100.6813cpe:2.3:o:intel:core_i9-10980xe_firmware:-:*:*:*:extreme:*:*:*cpe:2.3:o:intel:core_i9-10900x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-10920x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9900x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9920x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9960x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9980xe_firmware:-:*:*:*:extreme:*:*:*cpe:2.3:o:intel:core_i9-9940x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-7960x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-7940x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-7980xe_firmware:-:*:*:*:extreme:*:*:*cpe:2.3:o:intel:core_i9-7920x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-7900x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-7820x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-7800x_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9900ks_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9900t_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9900_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9880h_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9980hk_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-9900k_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i9-8950hk_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-10510u_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-10510y_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-10710u_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-1065g7_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-9700t_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-9700_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-9750h_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-9850h_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-9700k_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-8565u_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-8500y_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-8086k_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-8750h_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:intel:core_i7-8559u_firmware:-:*:*:*:*:*:*:*- +344 more
Affected products
| Product | Versions |
|---|---|
| 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux | affected See provided reference |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |