CVE-2018-12153

Опубликовано: 10 окт. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.9

EPSS Низкий

Описание

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user from a virtual machine guest to potentially crash the host system via local access.

Ссылки

http://seclists.org/fulldisclosure/2019/Oct/55
http://seclists.org/fulldisclosure/2019/Oct/56
http://www.securityfocus.com/bid/105582
Third Party Advisory
VDB Entry
https://support.apple.com/kb/HT210634
https://support.apple.com/kb/HT210722
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html
Vendor Advisory
http://seclists.org/fulldisclosure/2019/Oct/55
http://seclists.org/fulldisclosure/2019/Oct/56
http://www.securityfocus.com/bid/105582
Third Party Advisory
VDB Entry
https://support.apple.com/kb/HT210634
https://support.apple.com/kb/HT210722
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.33.47.5059:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.35.5057:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.38.4963:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.41.5058:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00227

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-cgw8-6rc7-29xf

CVSS3: 6.5

github

больше 3 лет назад

BDU:2019-02823

CVSS3: 6.5

fstec

больше 7 лет назад

Уязвимость в унифицированном шейдерном компиляторе драйвера графических систем Intel Graphics Drivers, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю вызвать отказ в обслуживании хостовой системы

EPSS

Процентиль: 45%

0.00227

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-20