cnvd - cnvd-2020-35894

cnvd-2020-35894

Vulnerability from cnvd

Title: Intel Driver and Support Assistant竞争条件问题漏洞

Description:

Intel Driver and Support Assistant是美国英特尔（Intel）公司的一款Intel驱动程序和支持助手应用程序。该程序主要用于检测和安装系统驱动程序更新。

Intel Driver and Support Assistant 20.1.5之前版本中存在竞争条件问题漏洞。攻击者可利用该漏洞导致拒绝服务。

Severity: 低

Patch Name: Intel Driver and Support Assistant竞争条件问题漏洞的补丁

Patch Description:

Intel Driver and Support Assistant是美国英特尔（Intel）公司的一款Intel驱动程序和支持助手应用程序。该程序主要用于检测和安装系统驱动程序更新。

Intel Driver and Support Assistant 20.1.5之前版本中存在竞争条件问题漏洞。攻击者可利用该漏洞导致拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html

Reference: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html

Impacted products

Name
Intel Driver and Support Assistant <20.1.5

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-0568"
    }
  },
  "description": "Intel Driver and Support Assistant\u662f\u7f8e\u56fd\u82f1\u7279\u5c14\uff08Intel\uff09\u516c\u53f8\u7684\u4e00\u6b3eIntel\u9a71\u52a8\u7a0b\u5e8f\u548c\u652f\u6301\u52a9\u624b\u5e94\u7528\u7a0b\u5e8f\u3002\u8be5\u7a0b\u5e8f\u4e3b\u8981\u7528\u4e8e\u68c0\u6d4b\u548c\u5b89\u88c5\u7cfb\u7edf\u9a71\u52a8\u7a0b\u5e8f\u66f4\u65b0\u3002\n\nIntel Driver and Support Assistant 20.1.5\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u7ade\u4e89\u6761\u4ef6\u95ee\u9898\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-35894",
  "openTime": "2020-07-02",
  "patchDescription": "Intel Driver and Support Assistant\u662f\u7f8e\u56fd\u82f1\u7279\u5c14\uff08Intel\uff09\u516c\u53f8\u7684\u4e00\u6b3eIntel\u9a71\u52a8\u7a0b\u5e8f\u548c\u652f\u6301\u52a9\u624b\u5e94\u7528\u7a0b\u5e8f\u3002\u8be5\u7a0b\u5e8f\u4e3b\u8981\u7528\u4e8e\u68c0\u6d4b\u548c\u5b89\u88c5\u7cfb\u7edf\u9a71\u52a8\u7a0b\u5e8f\u66f4\u65b0\u3002\r\n\r\nIntel Driver and Support Assistant 20.1.5\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u7ade\u4e89\u6761\u4ef6\u95ee\u9898\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Intel Driver and Support Assistant\u7ade\u4e89\u6761\u4ef6\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Intel Driver and Support Assistant \u003c20.1.5"
  },
  "referenceLink": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html",
  "serverity": "\u4f4e",
  "submitTime": "2020-04-16",
  "title": "Intel Driver and Support Assistant\u7ade\u4e89\u6761\u4ef6\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2020-0568 (GCVE-0-2020-0568)

Vulnerability from cvelistv5

Published

2020-04-15 16:58

Modified

2024-08-04 06:02

Severity ?

CWE

Denial of Service

Summary

Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access.

References

▼	URL	Tags
	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	Intel(R) Driver and Support Assistant	Version: Before version 20.1.5

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T06:02:52.319Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Driver and Support Assistant",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Before version 20.1.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of Service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T16:58:27",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2020-0568",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Driver and Support Assistant",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Before version 20.1.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00344.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2020-0568",
    "datePublished": "2020-04-15T16:58:27",
    "dateReserved": "2019-10-28T00:00:00",
    "dateUpdated": "2024-08-04T06:02:52.319Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted