CVE-2019-0154

high-risk
Published 2019-11-14

Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.

Do I need to act?

-
0.10% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (20)

Pentium J4205 Firmware
Pentium N4200 Firmware
Celeron J3355 Firmware
Celeron J3455 Firmware
Celeron N3350 Firmware
Celeron N3450 Firmware
Atom X5-A3930 Firmware
Atom X5-A3940 Firmware
Atom X7-A3950 Firmware
Pentium Silver J5005 Firmware
Pentium Silver N5000 Firmware
Celeron J4005 Firmware
Celeron J4105 Firmware
Celeron N4000 Firmware
Celeron N4100 Firmware

Affected Vendors

Intel Canonical

References (14)

Third Party Advisory http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackwar...
https://access.redhat.com/errata/RHSA-2020:0204
Issue Tracking https://seclists.org/bugtraq/2019/Nov/26
https://security.netapp.com/advisory/ntap-20200320-0004/
https://support.f5.com/csp/article/K73659122?utm_source=f5support&amp%3Butm_medi...
Third Party Advisory https://usn.ubuntu.com/4186-2/
Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00260....
Third Party Advisory http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackwar...
https://access.redhat.com/errata/RHSA-2020:0204
Issue Tracking https://seclists.org/bugtraq/2019/Nov/26
https://security.netapp.com/advisory/ntap-20200320-0004/
https://support.f5.com/csp/article/K73659122?utm_source=f5support&amp%3Butm_medi...
Third Party Advisory https://usn.ubuntu.com/4186-2/
Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00260....
51
/ 100
high-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 33/34 · Critical