Intel Graphics Driver Remote Code Execution And Denial of Service Vulnerabilities

Bugtraq ID:	105582
Class:	Unknown
CVE:	CVE-2018-12154 CVE-2018-12152 CVE-2018-12153
Remote:	No
Local:	Yes
Published:	Oct 09 2018 12:00AM
Updated:	Oct 09 2018 12:00AM
Credit:	Piotr Bania of Cisco TALOS.
Vulnerable:	Intel Graphics Driver 15.49 Intel Graphics Driver 15.47 Intel Graphics Driver 15.46 Intel Graphics Driver 15.45 Intel Graphics Driver 15.40 Intel Graphics Driver 15.36 Intel Graphics Driver 15.33 Intel Graphics Driver 0
Not Vulnerable:	Intel Graphics Driver 20.19.x.5058 Intel Graphics Driver 15.40.x.5058 Intel Graphics Driver 15.36.x.5057 Intel Graphics Driver 15.33.x.5056 Intel Graphics Driver 10.18.x.5057 Intel Graphics Driver 10.18.x.5056

Intel Graphics Driver Remote Code Execution And Denial of Service Vulnerabilities

Intel Graphics Driver is prone to a remote code-execution vulnerability and a denial-of-service vulnerability.

Successfully exploiting these issues may allow an attacker to execute arbitrary code in the context of affected application or cause denial-of-service conditions.

Intel Graphics Driver versions prior to 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) are vulnerable.

Intel Graphics Driver Remote Code Execution And Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Intel Graphics Driver Remote Code Execution And Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Intel Graphics Driver Remote Code Execution And Denial of Service Vulnerabilities

References:

• Intel Homepage (Intel)
  
• INTEL-SA-00166: Intel Graphics Driver Unified Shader Compiler Advisory (Intel)