多款Intel产品输入验证错误漏洞
| CNNVD-ID编号 | CNNVD-201911-646 | CVE编号 | CVE-2019-0154 |
| 发布时间 | 2019-11-12 | 更新时间 | 2020-08-25 |
| 漏洞类型 | 输入验证错误 | 漏洞来源 | Ubuntu,Red Hat,Slackware Security Team,Benjamin M. Romer |
| 危险等级 | 中危 | 威胁类型 | 本地 |
| 厂商 | N/A | ||
漏洞介绍
Intel Pentium Processor J4205等都是美国英特尔（Intel）公司的一款中央处理器（CPU）产品。
多款Intel产品中的processor graphics存在输入验证错误漏洞，该漏洞源于在子系统中程序没有进行充分的访问控制。本地攻击者可利用该漏洞造成拒绝服务。以下产品及版本受到影响：Intel Pentium Processor J4205；Intel Pentium Processor N4200；Intel Celeron Processor J3355；Intel Celeron Processor J3455；Intel Celeron Processor N3350；Intel Celeron Processor N3450；Intel Atom Processor x5-A3930；Intel Atom Processor x5-A3940；Intel Atom Processor x7-A3950；Intel Atom Processor x5-A3930；Intel Atom Processor x5-A3940；Intel Atom Processor x7-A3950；Intel Pentium Silver Processor J5005；Intel Pentium Silver Processor N5000；Intel Celeron Processor J4005；Intel Celeron Processor J4105；Intel Celeron Processor N4000；Intel Celeron Processor N4100；6th Generation Intel Core Processor Family；Intel Xeon Processor E3 v5 Family；7th Generation Intel Core Processor Family；Intel Xeon Processor E3 v6 Family；8th Generation Intel Core Processor Family；9th Generation Intel Core Processor Family；Intel Xeon Processor E 2100 Family。
漏洞补丁
目前厂商已发布升级了多款Intel产品输入验证错误漏洞的补丁，多款Intel产品输入验证错误漏洞的补丁获取链接：
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00260.html
参考网址
来源:UBUNTU
链接：https://usn.ubuntu.com/4186-2/
来源:BUGTRAQ
链接：https://seclists.org/bugtraq/2019/Nov/26
来源:CONFIRM
链接：https://support.f5.com/csp/article/K73659122?utm_source=f5support&utm_medium=RSS
来源:MISC
来源:REDHAT
链接：https://access.redhat.com/errata/RHSA-2020:0204
来源:MISC
链接：https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00260.html
来源:CONFIRM
链接：https://security.netapp.com/advisory/ntap-20200320-0004/
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193294-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193295-1.html
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2020:0279
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3843
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3842
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3841
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3840
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3839
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3838
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3837
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3836
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3834
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3832
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192984-1.html
来源:www.intel.com
链接：https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00237.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193200-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192952-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192951-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192950-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192949-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192948-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193379-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193371-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3835
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3844
来源:access.redhat.com
链接：https://access.redhat.com/errata/RHSA-2019:3833
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193316-1.html
来源:www.suse.com
链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193317-1.html
来源:www.debian.org
链接：https://www.debian.org/security/2019/dsa-4564
来源:vigilance.fr
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4704/
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155294/Red-Hat-Security-Advisory-2019-3839-01.html
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4676/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4346/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4246.2/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4772/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4252/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4584/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4286/
来源:access.redhat.com
链接：https://access.redhat.com/security/cve/cve-2019-0154
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155318/Kernel-Live-Patch-Security-Notice-LSN-0059-1.html
来源:support.lenovo.com
链接：https://support.lenovo.com/us/en/product_security/LEN-28235
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2019.4247/
来源:www.auscert.org.au
链接：https://www.auscert.org.au/bulletins/ESB-2020.0141/
来源:support.lenovo.com
链接：https://support.lenovo.com/us/en/product_security/LEN-27714
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/156058/Red-Hat-Security-Advisory-2020-0204-01.html
来源:packetstormsecurity.com
来源:nvd.nist.gov
链接：https://nvd.nist.gov/vuln/detail/CVE-2019-0154
来源:packetstormsecurity.com
链接：https://packetstormsecurity.com/files/155335/Ubuntu-Security-Notice-USN-4186-3.html
受影响实体
暂无
信息来源
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201911-646
评论