Lucene search

K
cveIntelCVE-2020-0517
HistoryMar 12, 2020 - 8:15 p.m.

CVE-2020-0517

2020-03-1220:15:12
CWE-787
intel
web.nvd.nist.gov
58
cve-2020-0517
intel graphics drivers
out-of-bounds write
security vulnerability
escalation of privilege
denial of service
nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

5.5

Confidence

High

EPSS

0

Percentile

12.6%

Out-of-bounds write in Intelยฎ Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.

Affected configurations

Nvd
Vulners
Node
intelgraphics_driverRange<15.36.38.5117
VendorProductVersionCPE
intelgraphics_driver*cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Intel(R) Graphics Drivers",
    "vendor": "Intel",
    "versions": [
      {
        "status": "affected",
        "version": "before version 15.36.38.5117"
      },
      {
        "status": "affected",
        "version": "See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"
      }
    ]
  }
]

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

5.5

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVE-2020-0517