SB2018121909 - Privilege escalation in GIGABYTE drivers

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018121909

SB2018121909 - Privilege escalation in GIGABYTE drivers

Published: December 19, 2018 Updated: December 27, 2023

Security Bulletin ID SB2018121909
CSH Severity
Medium
Patch available
NO
Number of vulnerabilities 4
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Medium 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 vulnerabilities.


1) Privilege escalation (CVE-ID: CVE-2018-19320)

CWE-ID: CWE-782 - Exposed IOCTL with Insufficient Access Control

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Clear


The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.

The weakness exists due to ring0 memcpy-like functionality built into GIO's IOCTL 0xC3502808. A local attacker can gain elevated privileges.


2) Privilege escalation (CVE-ID: CVE-2018-19322)

CWE-ID: CWE-782 - Exposed IOCTL with Insufficient Access Control

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Green


The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.

The weakness exists due to both GPCI and GIO expose functionality to read/write data from/to IO ports. A local attacker can execute arbitrary code with elevated privileges.


3) Privilege escalation (CVE-ID: CVE-2018-19323)

CWE-ID: CWE-782 - Exposed IOCTL with Insufficient Access Control

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Green


The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.

The weakness exists due to GIO exposes functionality to read and write Machine Specific Registers (MSRs). A local attacker can execute arbitrary ring-0 code with elevated privileges.


4) Privilege escalation (CVE-ID: CVE-2018-19321)

CWE-ID: CWE-782 - Exposed IOCTL with Insufficient Access Control

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Clear


The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.

The weakness exists due to both GPCI and GIO expose functionality to read/write arbitrary physical memory. A local attacker can gain elevated privileges.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References