CVE-2018-12201

EUVD-2018-4179

14.03.2019, 20:29

Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.7 MEDIUM	LOCAL	LOW	HIGH	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 51%

Affected Products (NVD)

Vendor	Product	Version
intel	platform_sample_firmware	-
intel	platform_sample_firmware	-
intel	silicon_reference_firmware	-
intel	silicon_reference_firmware	-

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

intel-microcode

bionic	Fixed 3.20190514.0ubuntu0.18.04.2 released
cosmic	Fixed 3.20190514.0ubuntu0.18.10.1 released
disco	not-affected
trusty	Fixed 3.20190514.0ubuntu0.14.04.1 released
xenial	Fixed 3.20190514.0ubuntu0.16.04.1 released

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

https://security.netapp.com/advisory/ntap-20190318-0002/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html

https://security.netapp.com/advisory/ntap-20190318-0002/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00191.html