Intel Graphics Driver up to 10.18/20.19/21.20/24.20 on Windows Kernel Mode Driver memory corruption

Summaryinfo

A vulnerability, which was classified as critical, was found in Intel Graphics Driver up to 10.18/20.19/21.20/24.20 on Windows. This impacts an unknown function of the component Kernel Mode Driver. Such manipulation leads to memory corruption. This vulnerability is documented as CVE-2018-12213. The attack needs to be performed locally. There is not any exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Intel Graphics Driver up to 10.18/20.19/21.20/24.20 on Windows (Hardware Driver Software) and classified as critical. Affected by this issue is some unknown functionality of the component Kernel Mode Driver. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.

The bug was discovered 03/12/2019. The weakness was released 03/14/2019 (Website). The advisory is shared for download at intel.com. This vulnerability is handled as CVE-2018-12213 since 06/11/2018. The attack needs to be approached locally. A simple authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

The vulnerability was handled as a non-public zero-day exploit for at least 2 days. During that time the estimated underground price was around $5k-$25k. The commercial vulnerability scanner Qualys is able to test this issue with plugin 371696 (Intel Graphics Driver Multiple Vulnerabilities(INTEL-SA-00189)).

Upgrading to version 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064 or 24.20.100.6373 eliminates this vulnerability.

Entries connected to this vulnerability are available at VDB-131752, VDB-131753, VDB-131754 and VDB-131755. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Hardware Driver Software

Vendor

• Intel

Name

• Graphics Driver

Version

• 10.0
• 10.1
• 10.2
• 10.3
• 10.4
• 10.5
• 10.6
• 10.7
• 10.8
• 10.9
• 10.10
• 10.11
• 10.12
• 10.13
• 10.14
• 10.15
• 10.16
• 10.17
• 10.18
• 20.0
• 20.1
• 20.2
• 20.3
• 20.4
• 20.5
• 20.6
• 20.7
• 20.8
• 20.9
• 20.10
• 20.11
• 20.12
• 20.13
• 20.14
• 20.15
• 20.16
• 20.17
• 20.18
• 20.19
• 21.0
• 21.1
• 21.2
• 21.3
• 21.4
• 21.5
• 21.6
• 21.7
• 21.8
• 21.9
• 21.10
• 21.11
• 21.12
• 21.13
• 21.14
• 21.15
• 21.16
• 21.17
• 21.18
• 21.19
• 21.20
• 24.0
• 24.1
• 24.2
• 24.3
• 24.4
• 24.5
• 24.6
• 24.7
• 24.8
• 24.9
• 24.10
• 24.11
• 24.12
• 24.13
• 24.14
• 24.15
• 24.16
• 24.17
• 24.18
• 24.19
• 24.20

License

• commercial

Website

• Vendor: https://www.intel.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion