{"containers": {"cna": {"affected": [{"product": "Intel(R) Graphics Drivers", "vendor": "Intel", "versions": [{"status": "affected", "version": "before versions 15.45.30.5103"}, {"status": "affected", "version": "15.40.44.5107"}, {"status": "affected", "version": "15.36.38.5117"}, {"status": "affected", "version": "15.33.49.5100"}, {"status": "affected", "version": "See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}]}], "descriptions": [{"lang": "en", "value": "Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access."}], "problemTypes": [{"descriptions": [{"description": "Escalation of Privilege, Denial of Service", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-03-20T09:06:18", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20200320-0003/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@intel.com", "ID": "CVE-2020-0520", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intel(R) Graphics Drivers", "version": {"version_data": [{"version_value": "before versions 15.45.30.5103"}, {"version_value": "15.40.44.5107"}, {"version_value": "15.36.38.5117"}, {"version_value": "15.33.49.5100"}, {"version_value": "See advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}]}}]}, "vendor_name": "Intel"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Escalation of Privilege, Denial of Service"}]}]}, "references": {"reference_data": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html", "refsource": "CONFIRM", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}, {"name": "https://security.netapp.com/advisory/ntap-20200320-0003/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20200320-0003/"}]}}}}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2020-0520", "datePublished": "2020-03-12T20:00:37", "dateReserved": "2019-10-28T00:00:00", "dateUpdated": "2020-03-20T09:06:18", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "E6D014D7-B878-4DD8-A1D3-82FC177B819C", "versionEndExcluding": "15.33.49.5100", "versionStartIncluding": "15.33", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "7DAB4DEB-3BCE-48A0-AAB9-842129D5DEC5", "versionEndExcluding": "15.36.38.5117", "versionStartIncluding": "15.36", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7250C6F-1E48-4E0B-AACB-52D4FC3F494D", "versionEndExcluding": "15.40.44.5107", "versionStartIncluding": "15.40", "vulnerable": true}, {"criteria": "cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB43B202-E327-43C3-8F68-A1CC5E6C8300", "versionEndExcluding": "15.45.30.5103", "versionStartIncluding": "15.45", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access."}, {"lang": "es", "value": "Un salto de ruta en la biblioteca igdkmd64.sys para Intel(R) Graphics Drivers versiones anteriores a 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 y 15.33.49.5100, puede permitir a un usuario autentificado habilitar potencialmente una escalada de privilegios o una denegaci\u00f3n de servicio por medio de un acceso local."}], "id": "CVE-2020-0520", "lastModified": "2021-07-21T11:39:23.747", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-03-12T20:15:12.957", "references": [{"source": "secure@intel.com", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20200320-0003/"}, {"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}