VulnerabilityModified

CVE-2019-0155

HIGH 7.8EPSS 0.67%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.67%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.67% probability · 50th percentile
CISA KEV: Not listed
Affected: redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · intel/graphics driver · intel/core i9-10980xe firmware · intel/core i9-10900x firmware · intel/core i9-10920x firmware · intel/core i9-9900x firmware · intel/core i9-9920x firmware · intel/core i9-9960x firmware · intel/core i9-9980xe firmware · intel/core i9-9940x firmware · intel/core i9-7960x firmware · intel/core i9-7940x firmware · intel/core i9-7980xe firmware · intel/core i9-7920x firmware · intel/core i9-7900x firmware · intel/core i7-7820x firmware · intel/core i7-7800x firmware · intel/core i9-9900ks firmware · +40 more
Source: secure@intel.com

References

http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:3841Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3887Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3889Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3908Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
https://seclists.org/bugtraq/2019/Nov/26Issue Tracking, Mailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20200320-0005/Third Party Advisory
https://support.f5.com/csp/article/K73659122?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/4186-2/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.htmlVendor Advisory
http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:3841Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3887Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3889Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3908Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0204Third Party Advisory
https://seclists.org/bugtraq/2019/Nov/26Issue Tracking, Mailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20200320-0005/Third Party Advisory
https://support.f5.com/csp/article/K73659122?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/4186-2/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.