Details of VAR-202102-0085

ID

VAR-202102-0085

CVE

CVE-2020-12384

TITLE

Intel(R) Graphics Drivers Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2021-010471

DESCRIPTION

Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user to potentially enable an escalation of privilege via local access. Intel(R) Graphics Drivers Exists in unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. There is a security vulnerability in Intel Graphics Drivers. There is no information about this vulnerability at present. Please pay attention to CNNVD or manufacturer announcements at any time

Trust: 1.71

sources: NVD: CVE-2020-12384 // JVNDB: JVNDB-2021-010471 // VULHUB: VHN-165057

AFFECTED PRODUCTS

vendor:	intel	model:	graphics drivers	scope:	lt	version:	26.20.100.8476	Trust: 1.0
vendor:	インテル	model:	intel graphics drivers	scope:	eq	version:	-	Trust: 0.8
vendor:	インテル	model:	intel graphics drivers	scope:	eq	version:	26.20.100.8476	Trust: 0.8

sources: JVNDB: JVNDB-2021-010471 // NVD: CVE-2020-12384

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-12384
value:	HIGH
Trust: 1.0
NVD:	CVE-2020-12384
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202102-822
value:	HIGH
Trust: 0.6
VULHUB:	VHN-165057
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2020-12384
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-165057
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2020-12384
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2020-12384
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-165057 // JVNDB: JVNDB-2021-010471 // CNNVD: CNNVD-202102-822 // NVD: CVE-2020-12384

PROBLEMTYPE DATA

problemtype:	NVD-CWE-Other	Trust: 1.0
problemtype:	others (CWE-Other) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-010471 // NVD: CVE-2020-12384

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202102-822

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202102-822

PATCH

title:	INTEL-SA-00438	url:	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html	Trust: 0.8
title:	Intel Graphics Drivers Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=142584	Trust: 0.6

sources: JVNDB: JVNDB-2021-010471 // CNNVD: CNNVD-202102-822

EXTERNAL IDS

db:	NVD	id:	CVE-2020-12384	Trust: 3.3
db:	JVN	id:	JVNVU93808918	Trust: 0.8
db:	JVNDB	id:	JVNDB-2021-010471	Trust: 0.8
db:	LENOVO	id:	LEN-51723	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.0472	Trust: 0.6
db:	CNNVD	id:	CNNVD-202102-822	Trust: 0.6
db:	VULHUB	id:	VHN-165057	Trust: 0.1

sources: VULHUB: VHN-165057 // JVNDB: JVNDB-2021-010471 // CNNVD: CNNVD-202102-822 // NVD: CVE-2020-12384

REFERENCES

url:	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2020-12384	Trust: 1.4
url:	https://jvn.jp/vu/jvnvu93808918/index.html	Trust: 0.8
url:	https://www.auscert.org.au/bulletins/esb-2021.0472	Trust: 0.6
url:	https://support.lenovo.com/us/en/product_security/len-51723	Trust: 0.6
url:	https://vigilance.fr/vulnerability/intel-graphics-drivers-multiple-vulnerabilities-34748	Trust: 0.6

sources: VULHUB: VHN-165057 // JVNDB: JVNDB-2021-010471 // CNNVD: CNNVD-202102-822 // NVD: CVE-2020-12384

SOURCES

db:	VULHUB	id:	VHN-165057
db:	JVNDB	id:	JVNDB-2021-010471
db:	CNNVD	id:	CNNVD-202102-822
db:	NVD	id:	CVE-2020-12384

LAST UPDATE DATE

2024-11-23T20:40:43.457000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-165057	date:	2021-02-22T00:00:00
db:	JVNDB	id:	JVNDB-2021-010471	date:	2022-07-01T08:46:00
db:	CNNVD	id:	CNNVD-202102-822	date:	2022-03-10T00:00:00
db:	NVD	id:	CVE-2020-12384	date:	2024-11-21T04:59:36.857

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-165057	date:	2021-02-17T00:00:00
db:	JVNDB	id:	JVNDB-2021-010471	date:	2022-07-01T00:00:00
db:	CNNVD	id:	CNNVD-202102-822	date:	2021-02-09T00:00:00
db:	NVD	id:	CVE-2020-12384	date:	2021-02-17T14:15:15.997