Intel Manageability Engine CVE-2017-5705 Multiple Local Buffer Overflow Vulnerabilities
BID:101917
CVE-2017-5705 |Info
Intel Manageability Engine CVE-2017-5705 Multiple Local Buffer Overflow Vulnerabilities
| Bugtraq ID: | 101917 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-5705 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 20 2017 12:00AM |
| Updated: | Dec 19 2017 10:37PM |
| Credit: | Mark Ermolov and Maxim Goryachy from Positive Technologies |
| Vulnerable: |
Intel Manageability Engine 11.7 Intel Manageability Engine 11.6 Intel Manageability Engine 11.5 Intel Manageability Engine 11.20 Intel Manageability Engine 11.10 Intel Manageability Engine 11.0 |
| Not Vulnerable: | |
Discussion
Intel Manageability Engine CVE-2017-5705 Multiple Local Buffer Overflow Vulnerabilities
Intel Manageability Engine is prone to multiple local buffer-overflow vulnerabilities because it fails to adequate boundary checks on user-supplied input.
Local attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
Intel Manageability Engine versions 11.0,11.5,11.6,11.7,11.10, and 11.20 are vulnerable.
Intel Manageability Engine is prone to multiple local buffer-overflow vulnerabilities because it fails to adequate boundary checks on user-supplied input.
Local attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
Intel Manageability Engine versions 11.0,11.5,11.6,11.7,11.10, and 11.20 are vulnerable.
Exploit / POC
Intel Manageability Engine CVE-2017-5705 Multiple Local Buffer Overflow Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Intel Manageability Engine CVE-2017-5705 Multiple Local Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Intel Manageability Engine CVE-2017-5705 Multiple Local Buffer Overflow Vulnerabilities
References:
References: