Sign-up

ID

VAR-202102-0074


CVE

CVE-2020-12368


TITLE

Intel(R) Graphics Drivers  Integer overflow vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2020-016023

DESCRIPTION

Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable an escalation of privilege via local access. Intel(R) Graphics Drivers Exists in an integer overflow vulnerability.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. There is a security vulnerability in Intel Graphics Drivers. There is no information about this vulnerability at present. Please pay attention to CNNVD or manufacturer announcements at any time

Trust: 1.71

sources: NVD: CVE-2020-12368 // JVNDB: JVNDB-2020-016023 // VULHUB: VHN-165039

AFFECTED PRODUCTS

vendor:intelmodel:graphics driversscope:ltversion:26.20.100.8141

Trust: 1.0

vendor:インテルmodel:intel graphics driversscope:eqversion: -

Trust: 0.8

vendor:インテルmodel:intel graphics driversscope:eqversion:26.20.100.8141

Trust: 0.8

sources: JVNDB: JVNDB-2020-016023 // NVD: CVE-2020-12368

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-12368
value: HIGH

Trust: 1.0

NVD: CVE-2020-12368
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202102-821
value: HIGH

Trust: 0.6

VULHUB: VHN-165039
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-12368
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-165039
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-12368
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2020-12368
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-165039 // JVNDB: JVNDB-2020-016023 // CNNVD: CNNVD-202102-821 // NVD: CVE-2020-12368

PROBLEMTYPE DATA

problemtype:CWE-190

Trust: 1.1

problemtype:Integer overflow or wraparound (CWE-190) [NVD Evaluation ]

Trust: 0.8

sources: VULHUB: VHN-165039 // JVNDB: JVNDB-2020-016023 // NVD: CVE-2020-12368

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202102-821

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202102-821

PATCH

title:INTEL-SA-00438url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html

Trust: 0.8

title:Intel Graphics Drivers Enter the fix for the verification error vulnerabilityurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=142583

Trust: 0.6

sources: JVNDB: JVNDB-2020-016023 // CNNVD: CNNVD-202102-821

EXTERNAL IDS

db:NVDid:CVE-2020-12368

Trust: 2.5

db:JVNid:JVNVU93808918

Trust: 0.8

db:JVNDBid:JVNDB-2020-016023

Trust: 0.8

db:LENOVOid:LEN-51723

Trust: 0.6

db:AUSCERTid:ESB-2021.0472

Trust: 0.6

db:CNNVDid:CNNVD-202102-821

Trust: 0.6

db:VULHUBid:VHN-165039

Trust: 0.1

sources: VULHUB: VHN-165039 // JVNDB: JVNDB-2020-016023 // CNNVD: CNNVD-202102-821 // NVD: CVE-2020-12368

REFERENCES

url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2020-12368

Trust: 1.4

url:https://jvn.jp/vu/jvnvu93808918/index.html

Trust: 0.8

url:https://www.auscert.org.au/bulletins/esb-2021.0472

Trust: 0.6

url:https://support.lenovo.com/us/en/product_security/len-51723

Trust: 0.6

url:https://vigilance.fr/vulnerability/intel-graphics-drivers-multiple-vulnerabilities-34748

Trust: 0.6

sources: VULHUB: VHN-165039 // JVNDB: JVNDB-2020-016023 // CNNVD: CNNVD-202102-821 // NVD: CVE-2020-12368

SOURCES

db:VULHUBid:VHN-165039
db:JVNDBid:JVNDB-2020-016023
db:CNNVDid:CNNVD-202102-821
db:NVDid:CVE-2020-12368

LAST UPDATE DATE

2024-11-23T20:42:58.837000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-165039date:2021-02-22T00:00:00
db:JVNDBid:JVNDB-2020-016023date:2021-11-01T04:44:00
db:CNNVDid:CNNVD-202102-821date:2021-12-06T00:00:00
db:NVDid:CVE-2020-12368date:2024-11-21T04:59:35.590

SOURCES RELEASE DATE

db:VULHUBid:VHN-165039date:2021-02-17T00:00:00
db:JVNDBid:JVNDB-2020-016023date:2021-11-01T00:00:00
db:CNNVDid:CNNVD-202102-821date:2021-02-09T00:00:00
db:NVDid:CVE-2020-12368date:2021-02-17T14:15:15.387