Buffer overflow in Intel products - CVE-2020-0528

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU28945

Buffer overflow in Intel products - CVE-2020-0528

Published: June 10, 2020


Vulnerability identifier: #VU28945
CSH Severity: Low
CVSS v4: 5.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-0528
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the target system.

The vulnerability exists due to a boundary error in BIOS firmware. A local user can trigger memory corruption and gain elevated privileges or cause a denial of service condition on the target system.


Affected software

7th Generation Intel Core Processors
8th Generation Intel Core Processors
10th Generation Intel Core Processors
9th Generation Intel Core Processors
EMC Data Domain

How to mitigate CVE-2020-0528

Install updates from vendor's website.

EMC Data Domain - addressed in versions 6.2.1.40, 7.1.0.30, 7.2.0.20, 7.2.0.50, 7.4

External References

Related Security Bulletins