CVE-2019-11111

Published: Nov 14, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (5)

Products: Intel: Graphics Driver · Netapp: Cloud Backup, Data Availability Services, Steelstore Cloud Integrated Storage, Solidfire Baseboard Management Controller Firmware

1 product

4 products

Data Availability Services

Steelstore Cloud Integrated Storage

Solidfire Baseboard Management Controller Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Intel Graphics Driver	Before 15.36.37.5074

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions
Netapp Data Availability Services	All versions
Netapp Steelstore Cloud Integrated Storage	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Solidfire Baseboard Management Controller Firmware	All versions

Running on/with	Platform Versions
Netapp Solidfire Baseboard Management Controller	All versions

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (4)

https://security.netapp.com/advisory/ntap-20200320-0005/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html

Source: secure@intel.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20200320-0005/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.