« Volver al listado

CVE-2019-11085

Estado: ModificadaAlta (7.8)—

La validación de entrada insuficiente en Kernel Mode Driver en Intel (R) i915 Graphics para Linux antes de la versión 5.0 puede permitir que un usuario autentificado habilite potencialmente la escalada de privilegios a través del acceso local.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Intel — I915 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-11085",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Intel(R) i915 Graphics for Linux",
          "versions": [
            {
              "status": "affected",
              "version": "Versions before 5.0."
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-05-17T16:29:03.063",
  "references": [
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html",
      "source": "secure@intel.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html",
      "source": "secure@intel.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/108488",
      "source": "secure@intel.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1873",
      "source": "secure@intel.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1891",
      "source": "secure@intel.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1959",
      "source": "secure@intel.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1971",
      "source": "secure@intel.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2020:0543",
      "source": "secure@intel.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2020:0592",
      "source": "secure@intel.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2020:0609",
      "source": "secure@intel.com"
    },
    {
      "url": "https://support.f5.com/csp/article/K09376613",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://usn.ubuntu.com/4068-1/",
      "source": "secure@intel.com"
    },
    {
      "url": "https://usn.ubuntu.com/4068-2/",
      "source": "secure@intel.com"
    },
    {
      "url": "https://usn.ubuntu.com/4118-1/",
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00249.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/108488",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1873",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1891",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1959",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2019:1971",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2020:0543",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2020:0592",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2020:0609",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.f5.com/csp/article/K09376613",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://usn.ubuntu.com/4068-1/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://usn.ubuntu.com/4068-2/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://usn.ubuntu.com/4118-1/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00249.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access."
    },
    {
      "lang": "es",
      "value": "La validación de entrada insuficiente en Kernel Mode Driver en Intel (R) i915 Graphics para Linux antes de la versión 5.0 puede permitir que un usuario autentificado habilite potencialmente la escalada de privilegios a través del acceso local."
    }
  ],
  "lastModified": "2026-06-17T02:12:16.657",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:intel:i915_firmware:*:*:*:*:*:linux:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFD3F7D4-C67B-4D95-AD94-9111D02720A9",
              "versionEndExcluding": "5.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:i915:-:*:*:*:*:linux:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DC0D3093-7D64-4ADA-A117-987AE9074F3F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}