Lucene search

[email protected]CVE-2020-24462

HistoryFeb 17, 2021 - 2:15 p.m.

CVE-2020-24462

2021-02-1714:15:16

CWE-787

[email protected]

web.nvd.nist.gov

cve-2020-24462

intel graphics driver

out of bounds write

local access

escalation of privilege

vulnerability

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Out of bounds write in the Intel® Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33.5164 and 27.20.100.8336 may allow an authenticated user to potentially enable an escalation of privilege via local access.

Affected configurations

Vulners

NVD

Node

intelgraphics_driverRange<15.33.53.5161

intelgraphics_driverRange<15.36.40.5162

intelgraphics_driverRange<15.40.47.5166

intelgraphics_driverRange<15.45.33.5164

intelgraphics_driverRange<27.20.100.8336

CPENameOperatorVersion
intel:graphics_driversintel graphics driverslt15.33.53.5161
intel:graphics_driversintel graphics driverslt15.36.40.5162
intel:graphics_driversintel graphics driverslt15.40.47.5166
intel:graphics_driversintel graphics driverslt15.45.33.5164
intel:graphics_driversintel graphics driverslt27.20.100.8336

CPE	Name	Operator	Version
intel:graphics_drivers	intel graphics drivers	lt	15.33.53.5161
intel:graphics_drivers	intel graphics drivers	lt	15.36.40.5162
intel:graphics_drivers	intel graphics drivers	lt	15.40.47.5166
intel:graphics_drivers	intel graphics drivers	lt	15.45.33.5164
intel:graphics_drivers	intel graphics drivers	lt	27.20.100.8336

CNA Affected

[
  {
    "product": "Intel(R) Graphics Driver",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33.5164 and 27.20.100.8336"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html

Social References

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVE-2020-24462

nvd1 prion1 cvelist1 intel1