SB2018121909 - Privilege escalation in GIGABYTE drivers

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Privilege escalation (CVE-ID: CVE-2018-19320)

The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.

The weakness exists due to ring0 memcpy-like functionality built into GIO's IOCTL 0xC3502808. A local attacker can gain elevated privileges.

2) Privilege escalation (CVE-ID: CVE-2018-19322)

The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.

The weakness exists due to both GPCI and GIO expose functionality to read/write data from/to IO ports. A local attacker can execute arbitrary code with elevated privileges.

3) Privilege escalation (CVE-ID: CVE-2018-19323)

The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.

The weakness exists due to GIO exposes functionality to read and write Machine Specific Registers (MSRs). A local attacker can execute arbitrary ring-0 code with elevated privileges.

4) Privilege escalation (CVE-ID: CVE-2018-19321)

The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.

The weakness exists due to both GPCI and GIO expose functionality to read/write arbitrary physical memory. A local attacker can gain elevated privileges.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities