CVE-2020-0520

Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
VendorProductVersion
intelgraphics_driver
15.33 ≤
𝑥
< 15.33.49.5100
intelgraphics_driver
15.36 ≤
𝑥
< 15.36.38.5117
intelgraphics_driver
15.40 ≤
𝑥
< 15.40.44.5107
intelgraphics_driver
15.45 ≤
𝑥
< 15.45.30.5103
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.netapp.com/advisory/ntap-20200320-0003/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html
https://security.netapp.com/advisory/ntap-20200320-0003/
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html