Vulnerability-Lookup

CNVD-2021-10795

Vulnerability from cnvd - Published: 2021-02-19

Title

Intel®Graphics Drivers多代处理器输入验证错误漏洞（CNVD-2021-10795）

Description

英特尔是美国一家以研制CPU为主的公司，是全球最大的个人计算机零件和CPU制造商。 Intel®Graphics Drivers多代处理器输入验证错误漏洞，攻击者可利用该漏洞潜在地启用权限升级。

Severity

低

Patch Name

Intel®Graphics Drivers多代处理器输入验证错误漏洞（CNVD-2021-10795）的补丁

Patch Description

英特尔是美国一家以研制CPU为主的公司，是全球最大的个人计算机零件和CPU制造商。 Intel®Graphics Drivers多代处理器输入验证错误漏洞，攻击者可利用该漏洞潜在地启用权限升级。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

英特尔建议更新英特尔显卡驱动程序到最新版本，请关注官网信息及时更新： https://www.intel.cn/content/www/cn/zh/homepage.html 对于Windows *:https://downloadcenter.intel.com/search?keyword=intel+graphics Linux:请与您的Linux发行版供应商联系以获取更新。

Impacted products

Name
['Intel Intel® Graphics Drivers for 3rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 4rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 5rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 6rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 7rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 8rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 9rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 10rd Generation Intel® Processors <27.20.100.8587']

Name

['Intel Intel® Graphics Drivers for 3rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 4rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 5rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 6rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 7rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 8rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 9rd Generation Intel® Processors <27.20.100.8587', 'Intel Intel® Graphics Drivers for 10rd Generation Intel® Processors <27.20.100.8587']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-12366"
    }
  },
  "description": "\u82f1\u7279\u5c14\u662f\u7f8e\u56fd\u4e00\u5bb6\u4ee5\u7814\u5236CPU\u4e3a\u4e3b\u7684\u516c\u53f8\uff0c\u662f\u5168\u7403\u6700\u5927\u7684\u4e2a\u4eba\u8ba1\u7b97\u673a\u96f6\u4ef6\u548cCPU\u5236\u9020\u5546\u3002\n\nIntel\u00aeGraphics Drivers\u591a\u4ee3\u5904\u7406\u5668\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6f5c\u5728\u5730\u542f\u7528\u6743\u9650\u5347\u7ea7\u3002",
  "formalWay": "\u82f1\u7279\u5c14\u5efa\u8bae\u66f4\u65b0\u82f1\u7279\u5c14\u663e\u5361\u9a71\u52a8\u7a0b\u5e8f\u5230\u6700\u65b0\u7248\u672c\uff0c\u8bf7\u5173\u6ce8\u5b98\u7f51\u4fe1\u606f\u53ca\u65f6\u66f4\u65b0\uff1a\r\nhttps://www.intel.cn/content/www/cn/zh/homepage.html\r\n\u5bf9\u4e8eWindows *:https://downloadcenter.intel.com/search?keyword=intel+graphics\r\nLinux:\u8bf7\u4e0e\u60a8\u7684Linux\u53d1\u884c\u7248\u4f9b\u5e94\u5546\u8054\u7cfb\u4ee5\u83b7\u53d6\u66f4\u65b0\u3002",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-10795",
  "openTime": "2021-02-19",
  "patchDescription": "\u82f1\u7279\u5c14\u662f\u7f8e\u56fd\u4e00\u5bb6\u4ee5\u7814\u5236CPU\u4e3a\u4e3b\u7684\u516c\u53f8\uff0c\u662f\u5168\u7403\u6700\u5927\u7684\u4e2a\u4eba\u8ba1\u7b97\u673a\u96f6\u4ef6\u548cCPU\u5236\u9020\u5546\u3002\r\n\r\nIntel\u00aeGraphics Drivers\u591a\u4ee3\u5904\u7406\u5668\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6f5c\u5728\u5730\u542f\u7528\u6743\u9650\u5347\u7ea7\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Intel\u00aeGraphics Drivers\u591a\u4ee3\u5904\u7406\u5668\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2021-10795\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Intel Intel\u00ae Graphics Drivers for 3rd Generation Intel\u00ae Processors \u003c27.20.100.8587",
      "Intel Intel\u00ae Graphics Drivers for 4rd Generation Intel\u00ae Processors \u003c27.20.100.8587",
      "Intel Intel\u00ae Graphics Drivers for 5rd Generation Intel\u00ae Processors \u003c27.20.100.8587",
      "Intel Intel\u00ae Graphics Drivers for 6rd Generation Intel\u00ae Processors \u003c27.20.100.8587",
      "Intel Intel\u00ae Graphics Drivers for 7rd Generation Intel\u00ae Processors \u003c27.20.100.8587",
      "Intel Intel\u00ae Graphics Drivers for 8rd Generation Intel\u00ae Processors \u003c27.20.100.8587",
      "Intel Intel\u00ae Graphics Drivers for 9rd Generation Intel\u00ae Processors \u003c27.20.100.8587",
      "Intel Intel\u00ae Graphics Drivers for 10rd Generation Intel\u00ae Processors \u003c27.20.100.8587"
    ]
  },
  "serverity": "\u4f4e",
  "submitTime": "2021-02-18",
  "title": "Intel\u00aeGraphics Drivers\u591a\u4ee3\u5904\u7406\u5668\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2021-10795\uff09"
}

CVE-2020-12366 (GCVE-0-2020-12366)

Vulnerability from cvelistv5 – Published: 2021-02-17 13:51 – Updated: 2024-08-04 11:56

Summary

Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access.

Severity

No CVSS data available.

CWE

n escalation of privilege

Assigner

intel CNA under the mitre root

CNA scorecard C 60/100 over 96 records in the last 180 days details

References

1 reference

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Graphics Drivers	Affected: before version 27.20.100.8587

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T11:56:51.642Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Graphics Drivers",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "before version 27.20.100.8587"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n escalation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-17T13:51:58.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-12366",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Graphics Drivers",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before version 27.20.100.8587"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n escalation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-12366",
    "datePublished": "2021-02-17T13:51:58.000Z",
    "dateReserved": "2020-04-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T11:56:51.642Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted