cvelistv5 - cve-2018-12222

CVE-2018-12222 (GCVE-0-2018-12222)

Vulnerability from cvelistv5

Published

2019-03-14 20:00

Modified

2024-09-16 17:59

Severity ?

CWE

Information Disclosure

Summary

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access.

References

URL

Tags

	https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html	x_refsource_CONFIRM
	https://support.lenovo.com/us/en/product_security/LEN-25084	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Intel Corporation	Intel(R) Graphics Driver for Windows	Version: Multiple versions.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:59.682Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-25084"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Graphics Driver for Windows",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Multiple versions."
            }
          ]
        }
      ],
      "datePublic": "2019-03-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-04T18:06:07.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-25084"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "DATE_PUBLIC": "2019-03-12T00:00:00",
          "ID": "CVE-2018-12222",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Graphics Driver for Windows",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Multiple versions."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html",
              "refsource": "CONFIRM",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html"
            },
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-25084",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-25084"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2018-12222",
    "datePublished": "2019-03-14T20:00:00.000Z",
    "dateReserved": "2018-06-11T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:59:23.367Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTFR-2019-AVI-108

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les produits Intel. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et un déni de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Intel	N/A	Processeur Intel Celeron J4105
Intel	N/A	Intel CSME versions 11.0 à 11.8.55
Intel	N/A	Intel CSME versions 11.20 à 11.22.0
Intel	N/A	Intel Data Center Manager SDK versions antérieures à 5.0.2
Intel	N/A	Intel CSME versions 12.0 à 12.0.10
Intel	N/A	Processeur Intel Celeron N4000
Intel	N/A	Intel Accelerated Storage Manager RSTe versions 5.5 et antérieures
Intel	N/A	Intel Server Board
Intel	N/A	Intel Server System
Intel	N/A	Processeur Intel Core de 7ème génération
Intel	N/A	Intel Compute ModuleIntel Graphics Driver pour Windows versions antérieures à 10.18.x.5059 (aussi connu comme 15.33.x.5059), 10.18.x.5057 (aussi connu comme 15.36.x.5057), 20.19.x.5063 (aussi connu comme 15.40.x.5063) 21.20.x.5064 (aussi connu comme 15.45.x.5064) et 24.20.100.6373
Intel	N/A	Intel CSME versions 11.10 à 11.11.55
Intel	N/A	Intel Trusted Execution Engine versions 4.0 à 4.0.5
Intel	N/A	Processeur Intel Core de 8ème génération
Intel	N/A	Processeur Intel Pentium Silver N5000
Intel	N/A	Composant Intel Unite Solution software server version 3.2 à 3.3
Intel	N/A	Processeur Intel Celeron N4100
Intel	N/A	Intel Server Platform Services versions SPS 4.01.00.152.0 à SPS 4.01.02.173
Intel	N/A	Intel Server Platform Services versions SPS 4.00.04.367 à SPS 4.00.04.382
Intel	N/A	Processeur Intel Pentium Silver J5005
Intel	N/A	Processeur Intel Celeron J4005
Intel	N/A	Intel Trusted Execution Engine versions 3.0 à 3.1.50

References

Title

Publication Time

Tags

Bulletin de sécurité Intel INTEL-SA-00189 du 12 mars 2019	None	vendor-advisory
Bulletin de sécurité Intel INTEL-SA-00231 du 12 mars 2019	None	vendor-advisory
Bulletin de sécurité Intel INTEL-SA-00215 du 12 mars 2019	None	vendor-advisory
Bulletin de sécurité Intel INTEL-SA-00185 du 12 mars 2019	None	vendor-advisory
Bulletin de sécurité Intel INTEL-SA-00214 du 12 mars 2019	None	vendor-advisory
Bulletin de sécurité Intel INTEL-SA-00191 du 12 mars 2019	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Processeur Intel Celeron J4105",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel CSME versions 11.0 \u00e0 11.8.55",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel CSME versions 11.20 \u00e0 11.22.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Data Center Manager SDK versions ant\u00e9rieures \u00e0 5.0.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel CSME versions 12.0 \u00e0 12.0.10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Processeur Intel Celeron N4000",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Accelerated Storage Manager RSTe versions 5.5 et ant\u00e9rieures",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Server Board",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Server System",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Processeur Intel Core de 7\u00e8me g\u00e9n\u00e9ration",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Compute ModuleIntel Graphics Driver pour Windows versions ant\u00e9rieures \u00e0 10.18.x.5059 (aussi connu comme 15.33.x.5059), 10.18.x.5057 (aussi connu comme 15.36.x.5057), 20.19.x.5063 (aussi connu comme 15.40.x.5063) 21.20.x.5064 (aussi connu comme 15.45.x.5064) et 24.20.100.6373",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel CSME versions 11.10 \u00e0 11.11.55",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Trusted Execution Engine versions 4.0 \u00e0 4.0.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Processeur Intel Core de 8\u00e8me g\u00e9n\u00e9ration",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Processeur Intel Pentium Silver N5000",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Composant Intel Unite Solution software server version 3.2 \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Processeur Intel Celeron N4100",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Server Platform Services versions SPS 4.01.00.152.0 \u00e0 SPS 4.01.02.173",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Server Platform Services versions SPS 4.00.04.367 \u00e0 SPS 4.00.04.382",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Processeur Intel Pentium Silver J5005",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Processeur Intel Celeron J4005",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Trusted Execution Engine versions 3.0 \u00e0 3.1.50",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-12223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12223"
    },
    {
      "name": "CVE-2019-0108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0108"
    },
    {
      "name": "CVE-2018-12215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12215"
    },
    {
      "name": "CVE-2018-12188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12188"
    },
    {
      "name": "CVE-2018-12205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12205"
    },
    {
      "name": "CVE-2019-0103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0103"
    },
    {
      "name": "CVE-2018-12222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12222"
    },
    {
      "name": "CVE-2018-12212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12212"
    },
    {
      "name": "CVE-2018-12213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12213"
    },
    {
      "name": "CVE-2018-12202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12202"
    },
    {
      "name": "CVE-2018-12199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12199"
    },
    {
      "name": "CVE-2018-12221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12221"
    },
    {
      "name": "CVE-2019-0107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0107"
    },
    {
      "name": "CVE-2018-12191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12191"
    },
    {
      "name": "CVE-2018-12200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12200"
    },
    {
      "name": "CVE-2018-12204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12204"
    },
    {
      "name": "CVE-2018-12214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12214"
    },
    {
      "name": "CVE-2019-0105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0105"
    },
    {
      "name": "CVE-2018-18089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18089"
    },
    {
      "name": "CVE-2019-0109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0109"
    },
    {
      "name": "CVE-2018-12187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12187"
    },
    {
      "name": "CVE-2018-12219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12219"
    },
    {
      "name": "CVE-2019-0102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0102"
    },
    {
      "name": "CVE-2018-12192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12192"
    },
    {
      "name": "CVE-2018-12208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12208"
    },
    {
      "name": "CVE-2019-0101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0101"
    },
    {
      "name": "CVE-2018-12217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12217"
    },
    {
      "name": "CVE-2018-12189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12189"
    },
    {
      "name": "CVE-2018-12196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12196"
    },
    {
      "name": "CVE-2019-0135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0135"
    },
    {
      "name": "CVE-2018-12201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12201"
    },
    {
      "name": "CVE-2018-12211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12211"
    },
    {
      "name": "CVE-2019-0106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0106"
    },
    {
      "name": "CVE-2018-12203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12203"
    },
    {
      "name": "CVE-2018-12209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12209"
    },
    {
      "name": "CVE-2019-0112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0112"
    },
    {
      "name": "CVE-2019-0110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0110"
    },
    {
      "name": "CVE-2018-12185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12185"
    },
    {
      "name": "CVE-2019-0111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0111"
    },
    {
      "name": "CVE-2018-12218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12218"
    },
    {
      "name": "CVE-2018-12220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12220"
    },
    {
      "name": "CVE-2018-12216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12216"
    },
    {
      "name": "CVE-2018-12224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12224"
    },
    {
      "name": "CVE-2019-0104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-0104"
    },
    {
      "name": "CVE-2018-12210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12210"
    },
    {
      "name": "CVE-2018-12198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12198"
    },
    {
      "name": "CVE-2018-18090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18090"
    },
    {
      "name": "CVE-2018-12190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12190"
    },
    {
      "name": "CVE-2018-18091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-18091"
    }
  ],
  "initial_release_date": "2019-03-13T00:00:00",
  "last_revision_date": "2019-03-13T00:00:00",
  "links": [],
  "reference": "CERTFR-2019-AVI-108",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-03-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Intel.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un d\u00e9ni de service \u00e0 distance et un d\u00e9ni\nde service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00189 du 12 mars 2019",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00189.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00231 du 12 mars 2019",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00231.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00215 du 12 mars 2019",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00215.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00185 du 12 mars 2019",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00185.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00214 du 12 mars 2019",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00214.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel INTEL-SA-00191 du 12 mars 2019",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00191.html"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2018-12222 (GCVE-0-2018-12222)

Vulnerability from cvelistv5

CERTFR-2019-AVI-108

Vulnerability from certfr_avis

Solution

Tags

Sightings

Nomenclature