6.7

CVE-2019-11127

Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Nuc Kit Firmware Version -
   Intel ≫ Nuc Kit Nuc8i3bex Version -
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_d34010wyx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_d54250wyx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_de3815tyb
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_dn2820fykh
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc5cpyh
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc5i3myx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc5i3ryx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc5i5myx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc5i5ryx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc5i7ryx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc5pgyh
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc5ppyh
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc6cayx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc6i3syx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc6i5syx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc6i7kyk
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc7cjy
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc7i3bnx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc7i3dnx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc7i5bnx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc7i5dnx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc7i7bnx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc7i7dnx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc7pjy
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc8i3cyx
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc8i5bex
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc8i7bex
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc8i7hnk
   Intel ≫ Nuc Kit Nuc8i3bex Version nuc_kit_nuc8i7hvk
Intel ≫ Compute Card Firmware Version -
   Intel ≫ Compute Card Cd1c64gk Version -
   Intel ≫ Compute Card Cd1iv128mk Version -
   Intel ≫ Compute Card Cd1m3128mk Version -
   Intel ≫ Compute Card Cd1p64gk Version -
Intel ≫ Compute Stick Firmware Version -
   Intel ≫ Compute Stick Stck1a32wfc Version -
   Intel ≫ Compute Stick Stck1a8lfc Version -
   Intel ≫ Compute Stick Stk2m364cc Version -
   Intel ≫ Compute Stick Stk2m3w64cc Version -
   Intel ≫ Compute Stick Stk2mv64cc Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.338
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.securityfocus.com/bid/108766
Third Party Advisory
VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html?wapkw=2019-11129
Patch
Vendor Advisory