CVE-2019-0119

Published: May 17, 2019Modified: Nov 21, 2024

6.7

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.

Affected (92)

Intel

92 products

Xeon D 1649n Firmware

Xeon D 1633n Firmware

Xeon D 1637 Firmware

Xeon D 1627 Firmware

Xeon D 1623n Firmware

Xeon D 1622 Firmware

Xeon D 1653n Firmware

Xeon D 1602 Firmware

Xeon D 2141i Firmware

Xeon D 2177nt Firmware

Xeon D 2161i Firmware

Xeon D 2143it Firmware

Xeon D 2146nt Firmware

Xeon D 2145nt Firmware

Xeon D 2123it Firmware

Xeon D 2173it Firmware

Xeon D 2191 Firmware

Xeon D 2187nt Firmware

Xeon D 2142it Firmware

Xeon D 2163it Firmware

Xeon D 2183it Firmware

Xeon D 2166nt Firmware

Xeon D 1513n Firmware

Xeon D 1533n Firmware

Xeon D 1553n Firmware

Xeon D 1523n Firmware

Xeon D 1543n Firmware

Xeon Platinum Processors Firmware

Xeon Gold Processors Firmware

Xeon Silver Processors Firmware

Xeon Bronze Processors Firmware

Server Board S2600wf Firmware

Server Board S2600bp Firmware

Server Board S2600st Firmware

Server Board S2600wt Firmware

Server Board S2600kp Firmware

Server Board S2600tp Firmware

Server Board S2600cw Firmware

Server Board S7200ap Firmware

Server Board S1200sp Firmware

Server System S9200wk Firmware

Hns2600bpq24 Firmware

Hns2600bps Firmware

Hns2600bps24 Firmware

Hns2600tp24r Firmware

Hns2600tp24sr Firmware

Hns2600tp24str Firmware

Hns2600bpb24 Firmware

Hns2600bpb Firmware

Hns2600bpblc Firmware

Hns2600bpblc24 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1649n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1649n	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1633n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1633n	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1637 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1637	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1627 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1627	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1623n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1623n	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1622 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1622	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1653n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1653n	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1602 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1602	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2141i Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2141i	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2177nt Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2177nt	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2161i Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2161i	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2143it Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2143it	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2146nt Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2146nt	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2145nt Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2145nt	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2123it Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2123it	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2173it Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2173it	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2191 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2191	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2187nt Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2187nt	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2142it Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2142it	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2163it Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2163it	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2183it Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2183it	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 2166nt Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 2166nt	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1513n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1513n	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1533n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1533n	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1553n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1553n	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1523n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1523n	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1543n Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1543n	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1559 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1559	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1529 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1529	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1539 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1539	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1567 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1567	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1557 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1557	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1577 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1577	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1571 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1571	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1528 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1528	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1541 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1541	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1518 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1518	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1521 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1521	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1531 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1531	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1548 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1548	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1527 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1527	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1537 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1537	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1540 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1540	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon D 1520 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon D 1520	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon Platinum Processors Firmware	All versions

Running on/with	Platform Versions
Intel Xeon Platinum Processors	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon Gold Processors Firmware	All versions

Running on/with	Platform Versions
Intel Xeon Gold Processors	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon Silver Processors Firmware	All versions

Running on/with	Platform Versions
Intel Xeon Silver Processors	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon Bronze Processors Firmware	All versions

Running on/with	Platform Versions
Intel Xeon Bronze Processors	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600wf Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S2600wf	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600bp Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S2600bp	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600st Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S2600st	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600wt Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S2600wt	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600kp Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S2600kp	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600tp Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S2600tp	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S2600cw Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S2600cw	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S7200ap Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S7200ap	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server Board S1200sp Firmware	All versions

Running on/with	Platform Versions
Intel Server Board S1200sp	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Server System S9200wk Firmware	All versions

Running on/with	Platform Versions
Intel Server System S9200wk	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600bpq24 Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600bpq24	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600bps Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600bps	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600bps24 Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600bps24	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns7200ap Firmware	All versions

Running on/with	Platform Versions
Intel Hns7200ap	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns7200apl Firmware	All versions

Running on/with	Platform Versions
Intel Hns7200apl	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns7200apr Firmware	All versions

Running on/with	Platform Versions
Intel Hns7200apr	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns7200aprl Firmware	All versions

Running on/with	Platform Versions
Intel Hns7200aprl	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600tp Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600tp	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600tp24r Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600tp24r	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600tp24sr Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600tp24sr	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600tp24str Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600tp24str	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600tpf Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600tpf	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600tpfr Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600tpfr	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600tpnr Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600tpnr	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600tpr Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600tpr	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600kp Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600kp	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600kpf Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600kpf	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600kpfr Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600kpfr	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600kpr Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600kpr	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600bpb24 Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600bpb24	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600bpb Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600bpb	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600bpblc Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600bpblc	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600bpblc24 Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600bpblc24	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600bpq Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600bpq	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2400lp Firmware	All versions

Running on/with	Platform Versions
Intel Hns2400lp	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600jf Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600jf	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600jff Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600jff	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600jfq Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600jfq	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600wp Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600wp	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600wpf Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600wpf	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Hns2600wpq Firmware	All versions

Running on/with	Platform Versions
Intel Hns2600wpq	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Mfs2600ki Firmware	All versions

Running on/with	Platform Versions
Intel Mfs2600ki	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Mfs5000si Firmware	All versions

Running on/with	Platform Versions
Intel Mfs5000si	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Mfs5520vir Firmware	All versions

Running on/with	Platform Versions
Intel Mfs5520vir	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (6)

http://www.securityfocus.com/bid/108485

Source: secure@intel.com

https://support.f5.com/csp/article/K85585101

Source: secure@intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00223.html

Source: secure@intel.com

Vendor Advisory

http://www.securityfocus.com/bid/108485

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.f5.com/csp/article/K85585101

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00223.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.