CVE-2019-11085 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
intel	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 36%

Vendor	Product	Version
intel	i915_firmware	𝑥 < 5.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
stretch	not-affected
jessie	not-affected
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

disco	not-affected
cosmic	ignored
bionic	Fixed 4.15.0-55.60 released
xenial	not-affected
trusty	not-affected

linux-aws

disco	not-affected
cosmic	ignored
bionic	Fixed 4.15.0-1047.49 released
xenial	not-affected
trusty	not-affected

linux-aws-hwe

disco	dne
cosmic	dne
bionic	dne
xenial	Fixed 4.15.0-1047.49~16.04.1 released
trusty	dne

linux-azure

disco	not-affected
cosmic	ignored
bionic	Fixed 4.18.0-1025.27~18.04.1 released
xenial	Fixed 4.15.0-1051.56 released
trusty	ignored

linux-azure-edge

disco	dne
cosmic	dne
bionic	Fixed 4.18.0-1025.27~18.04.1 released
xenial	Fixed 4.15.0-1051.56 released
trusty	dne

linux-euclid

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-flo

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-gcp

disco	not-affected
cosmic	ignored
bionic	Fixed 4.15.0-1037.39 released
xenial	Fixed 4.15.0-1037.39~16.04.1 released
trusty	dne

linux-gcp-edge

disco	dne
cosmic	dne
bionic	Fixed 4.15.0-1037.39 released
xenial	dne
trusty	dne

linux-gke

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-gke-4.15

disco	dne
bionic	Fixed 4.15.0-1037.39 released
xenial	dne
trusty	dne

linux-gke-5.0

disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-goldfish

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-grouper

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe

disco	dne
cosmic	dne
bionic	Fixed 5.0.0-23.24~18.04.1 released
xenial	Fixed 4.15.0-55.60~16.04.2 released
trusty	dne

linux-hwe-edge

disco	dne
cosmic	dne
bionic	not-affected
xenial	Fixed 4.15.0-55.60~16.04.2 released
trusty	dne

linux-kvm

disco	not-affected
cosmic	ignored
bionic	Fixed 4.15.0-1039.39 released
xenial	not-affected
trusty	dne

linux-lts-trusty

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-utopic

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-vivid

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-wily

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	not-affected

linux-maguro

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-mako

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-manta

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem

disco	Fixed 4.15.0-1050.57 released
cosmic	ignored
bionic	Fixed 4.15.0-1050.57 released
xenial	ignored
trusty	dne

linux-oracle

disco	Fixed 4.15.0-1018.20 released
cosmic	ignored
bionic	Fixed 4.15.0-1018.20 released
xenial	Fixed 4.15.0-1018.20~16.04.1 released
trusty	dne

linux-raspi2

disco	not-affected
cosmic	ignored
bionic	Fixed 4.15.0-1041.44 released
xenial	not-affected
trusty	dne

linux-snapdragon

disco	not-affected
cosmic	dne
bionic	Fixed 4.15.0-1058.64 released
xenial	not-affected
trusty	dne

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html

http://www.securityfocus.com/bid/108488

https://access.redhat.com/errata/RHSA-2019:1873

https://access.redhat.com/errata/RHSA-2019:1891

https://access.redhat.com/errata/RHSA-2019:1959

https://access.redhat.com/errata/RHSA-2019:1971

https://access.redhat.com/errata/RHSA-2020:0543

https://access.redhat.com/errata/RHSA-2020:0592

https://access.redhat.com/errata/RHSA-2020:0609

https://support.f5.com/csp/article/K09376613

https://usn.ubuntu.com/4068-1/

https://usn.ubuntu.com/4068-2/

https://usn.ubuntu.com/4118-1/

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00249.html