VAR-201805-0917
Vulnerability from variot - Updated: 2023-12-18 13:52Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash these services potentially resulting in a denial of service. Intel system Configuration utilities selview.exe and syscfg.exe Contains a buffer error vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. An attacker can exploit this issue to obtain sensitive information or cause a denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed. Intel system Configuration utilities selview.exe and syscfg.exe are system configuration utilities of Intel Corporation. Document Title: =============== Intel System CU - Buffer Overflow (Denial of Service) Vulnerability
References (Source):
https://www.vulnerability-lab.com/get_content.php?id=2133
Security ID: INTEL-SA-00134
https://nvd.nist.gov/vuln/detail/CVE-2018-3661 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3661
Acknowledgements: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00134.html
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-3661
CVE-ID:
CVE-2018-3661
Release Date:
2018-07-11
Vulnerability Laboratory ID (VL-ID):
2133
Common Vulnerability Scoring System:
5.5
Vulnerability Class:
Buffer Overflow
Current Estimated Price:
3.000a! - 4.000a!
Abstract Advisory Information:
The vulnerability laboratory core research team discovered a local buffer overflow vulnerability in the official Intel System CU 14.0 and 14.1.
Vulnerability Disclosure Timeline:
2018-05-15: Release Date (Intel) 2018-07-11: Public Disclosure (Vulnerability Laboratory)
Discovery Status:
Published
Affected Product(s):
Intel Systems Product: Intel System - CU (Utilities) 14.0 build & 14.1 build - (IntelA(r) C620 Series Chipsets b19)
Exploitation Technique:
Local
Severity Level:
Medium
Authentication Type:
Restricted authentication (user/moderator) - User privileges
User Interaction:
No User Interaction
Disclosure Type:
Bug Bounty Program
Technical Details & Description:
A local buffer overflow vulnerability has been discovered in the official Intel System CU 14.0 and 14.1 utilities. The vulnerability can be exploited by local attackers to overwrite active registers to compromise the process or affected computer system.
Affected are versions of syscfg.exe before release 14.0 build 16 or for systems based on IntelA(r) C620 Series Chipsets 14.1 build 19. Affected are Versions of selview.exe before release 14.0 build 21 or for systems based on IntelA(r) C620 Series Chipsets before 14.0 build 11.
Exploitation of the local buffer overflow vulnerability requires no user interaction and system process privileges. Successful exploitation of the buffer overflow vulnerability results in a compromise of the local system process or affected computer system.
Vulnerable File(s): [+] syscfg.exe [+] selview.exe
https://www.vulnerability-lab.com/resources/pictures/2133/Intel1.jpg https://www.vulnerability-lab.com/resources/pictures/2133/Intel2.jpg
Security Risk:
The security risk of the exploitable local buffer overflow vulnerability in the utilities software is estimated as medium.
Credits & Authors:
S.AbenMassaoud - https://www.vulnerability-lab.com/show.php?user=S.AbenMassaoud
Disclaimer & Information:
The information provided in this advisory is provided as it is without any warranty. Vulnerability Lab disclaims all warranties, either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. We do not approve or encourage anybody to break any licenses, policies, deface websites, hack into databases or trade with stolen data.
Domains: www.vulnerability-lab.com www.vuln-lab.com
www.vulnerability-db.com
Services: magazine.vulnerability-lab.com paste.vulnerability-db.com
infosec.vulnerability-db.com
Social: twitter.com/vuln_lab facebook.com/VulnerabilityLab
youtube.com/user/vulnerability0lab
Feeds: vulnerability-lab.com/rss/rss.php
vulnerability-lab.com/rss/rss_upcoming.php
vulnerability-lab.com/rss/rss_news.php
Programs: vulnerability-lab.com/submit.php
vulnerability-lab.com/register.php
vulnerability-lab.com/list-of-bug-bounty-programs.php
Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory. Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, source code, videos and other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list, modify, use or edit our material contact (admin@ or research@) to get a ask permission.
Copyright A(c) 2018 | Vulnerability Laboratory - [Evolution
Security GmbH]aC/
-- VULNERABILITY LABORATORY - RESEARCH TEAM SERVICE: www.vulnerability-lab.com
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201805-0917",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "selview",
"scope": "lt",
"trust": 1.0,
"vendor": "intel",
"version": "14.0"
},
{
"model": "syscfg",
"scope": "lt",
"trust": 1.0,
"vendor": "intel",
"version": "14.0"
},
{
"model": "selview",
"scope": null,
"trust": 0.8,
"vendor": "intel",
"version": null
},
{
"model": "syscfg",
"scope": null,
"trust": 0.8,
"vendor": "intel",
"version": null
},
{
"model": "syscfg build",
"scope": "eq",
"trust": 0.3,
"vendor": "intel",
"version": "14.011"
},
{
"model": "selview build",
"scope": "eq",
"trust": 0.3,
"vendor": "intel",
"version": "14.011"
},
{
"model": "syscfg build",
"scope": "ne",
"trust": 0.3,
"vendor": "intel",
"version": "14.016"
},
{
"model": "selview build",
"scope": "ne",
"trust": 0.3,
"vendor": "intel",
"version": "14.021"
}
],
"sources": [
{
"db": "BID",
"id": "104247"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"db": "NVD",
"id": "CVE-2018-3661"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:intel:syscfg:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "14.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:intel:selview:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "14.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2018-3661"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SaifAllah benMassaoud (@benmassaou).",
"sources": [
{
"db": "BID",
"id": "104247"
}
],
"trust": 0.3
},
"cve": "CVE-2018-3661",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Local",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 2.1,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-3661",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Low",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "VHN-133692",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Local",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 5.5,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-3661",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2018-3661",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201805-461",
"trust": 0.6,
"value": "LOW"
},
{
"author": "VULHUB",
"id": "VHN-133692",
"trust": 0.1,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-133692"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"db": "NVD",
"id": "CVE-2018-3661"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash these services potentially resulting in a denial of service. Intel system Configuration utilities selview.exe and syscfg.exe Contains a buffer error vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. \nAn attacker can exploit this issue to obtain sensitive information or cause a denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed. Intel system Configuration utilities selview.exe and syscfg.exe are system configuration utilities of Intel Corporation. Document Title:\n===============\nIntel System CU - Buffer Overflow (Denial of Service) Vulnerability\n\n\nReferences (Source):\n====================\nhttps://www.vulnerability-lab.com/get_content.php?id=2133\n\nSecurity ID: INTEL-SA-00134\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-3661\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3661\n\nAcknowledgements:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00134.html\n\nhttp://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-3661\n\nCVE-ID:\n=======\nCVE-2018-3661\n\n\nRelease Date:\n=============\n2018-07-11\n\n\nVulnerability Laboratory ID (VL-ID):\n====================================\n2133\n\n\nCommon Vulnerability Scoring System:\n====================================\n5.5\n\n\nVulnerability Class:\n====================\nBuffer Overflow\n\n\nCurrent Estimated Price:\n========================\n3.000a! - 4.000a!\n\n\nAbstract Advisory Information:\n==============================\nThe vulnerability laboratory core research team discovered a local\nbuffer overflow vulnerability in the official Intel System CU 14.0 and 14.1. \n\n\nVulnerability Disclosure Timeline:\n==================================\n2018-05-15: Release Date (Intel)\n2018-07-11: Public Disclosure (Vulnerability Laboratory)\n\n\nDiscovery Status:\n=================\nPublished\n\n\nAffected Product(s):\n====================\nIntel Systems\nProduct: Intel System - CU (Utilities) 14.0 build \u0026 14.1 build - (IntelA(r)\nC620 Series Chipsets b19)\n\n\nExploitation Technique:\n=======================\nLocal\n\n\nSeverity Level:\n===============\nMedium\n\n\nAuthentication Type:\n====================\nRestricted authentication (user/moderator) - User privileges\n\n\nUser Interaction:\n=================\nNo User Interaction\n\n\nDisclosure Type:\n================\nBug Bounty Program\n\n\nTechnical Details \u0026 Description:\n================================\nA local buffer overflow vulnerability has been discovered in the\nofficial Intel System CU 14.0 and 14.1 utilities. \nThe vulnerability can be exploited by local attackers to overwrite\nactive registers to compromise the process or\naffected computer system. \n\nAffected are versions of syscfg.exe before release 14.0 build 16 or for\nsystems based on IntelA(r) C620 Series\nChipsets 14.1 build 19. Affected are Versions of selview.exe before\nrelease 14.0 build 21 or for systems based\non IntelA(r) C620 Series Chipsets before 14.0 build 11. \n\nExploitation of the local buffer overflow vulnerability requires no user\ninteraction and system process privileges. \nSuccessful exploitation of the buffer overflow vulnerability results in\na compromise of the local system process or\naffected computer system. \n\nVulnerable File(s):\n[+] syscfg.exe\n[+] selview.exe\n\n\nhttps://www.vulnerability-lab.com/resources/pictures/2133/Intel1.jpg\nhttps://www.vulnerability-lab.com/resources/pictures/2133/Intel2.jpg\n\n\nSecurity Risk:\n==============\nThe security risk of the exploitable local buffer overflow vulnerability\nin the utilities software is estimated as medium. \n\n\nCredits \u0026 Authors:\n==================\nS.AbenMassaoud -\nhttps://www.vulnerability-lab.com/show.php?user=S.AbenMassaoud\n\n\nDisclaimer \u0026 Information:\n=========================\nThe information provided in this advisory is provided as it is without\nany warranty. Vulnerability Lab disclaims all warranties,\neither expressed or implied, including the warranties of merchantability\nand capability for a particular purpose. Vulnerability-Lab\nor its suppliers are not liable in any case of damage, including direct,\nindirect, incidental, consequential loss of business profits\nor special damages, even if Vulnerability-Lab or its suppliers have been\nadvised of the possibility of such damages. Some states do\nnot allow the exclusion or limitation of liability for consequential or\nincidental damages so the foregoing limitation may not apply. \nWe do not approve or encourage anybody to break any licenses, policies,\ndeface websites, hack into databases or trade with stolen data. \n\nDomains: www.vulnerability-lab.com\t\twww.vuln-lab.com\t\t\t\nwww.vulnerability-db.com\nServices: magazine.vulnerability-lab.com\tpaste.vulnerability-db.com \t\t\ninfosec.vulnerability-db.com\nSocial:\t twitter.com/vuln_lab\t\tfacebook.com/VulnerabilityLab \t\t\nyoutube.com/user/vulnerability0lab\nFeeds:\t vulnerability-lab.com/rss/rss.php\nvulnerability-lab.com/rss/rss_upcoming.php\nvulnerability-lab.com/rss/rss_news.php\nPrograms: vulnerability-lab.com/submit.php\nvulnerability-lab.com/register.php\nvulnerability-lab.com/list-of-bug-bounty-programs.php\n\nAny modified copy or reproduction, including partially usages, of this\nfile requires authorization from Vulnerability Laboratory. \nPermission to electronically redistribute this alert in its unmodified\nform is granted. All other rights, including the use of other\nmedia, are reserved by Vulnerability-Lab Research Team or its suppliers. \nAll pictures, texts, advisories, source code, videos and other\ninformation on this website is trademark of vulnerability-lab team \u0026 the\nspecific authors or managers. To record, list, modify, use or\nedit our material contact (admin@ or research@) to get a ask permission. \n\n\t\t\t\t Copyright A(c) 2018 | Vulnerability Laboratory - [Evolution\nSecurity GmbH]aC/\n\n-- \nVULNERABILITY LABORATORY - RESEARCH TEAM\nSERVICE: www.vulnerability-lab.com\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-3661"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"db": "BID",
"id": "104247"
},
{
"db": "VULHUB",
"id": "VHN-133692"
},
{
"db": "PACKETSTORM",
"id": "148496"
}
],
"trust": 2.07
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-133692",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-133692"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-3661",
"trust": 2.9
},
{
"db": "BID",
"id": "104247",
"trust": 1.4
},
{
"db": "JVNDB",
"id": "JVNDB-2018-005141",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201805-461",
"trust": 0.7
},
{
"db": "PACKETSTORM",
"id": "148496",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-133692",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-133692"
},
{
"db": "BID",
"id": "104247"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"db": "PACKETSTORM",
"id": "148496"
},
{
"db": "NVD",
"id": "CVE-2018-3661"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
]
},
"id": "VAR-201805-0917",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-133692"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:52:41.137000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "INTEL-SA-00134",
"trust": 0.8,
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00134.html"
},
{
"title": "Intel system Configuration utilities selview.exe and syscfg.exe Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=80066"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-133692"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"db": "NVD",
"id": "CVE-2018-3661"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.1,
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00134.html"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/bid/104247"
},
{
"trust": 0.9,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-3661"
},
{
"trust": 0.9,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-3661"
},
{
"trust": 0.3,
"url": "http://www.intel.com/"
},
{
"trust": 0.1,
"url": "https://www.vulnerability-lab.com/show.php?user=s.abenmassaoud"
},
{
"trust": 0.1,
"url": "https://www.vulnerability-lab.com/get_content.php?id=2133"
},
{
"trust": 0.1,
"url": "https://www.vulnerability-db.com"
},
{
"trust": 0.1,
"url": "https://www.vulnerability-lab.com/resources/pictures/2133/intel2.jpg"
},
{
"trust": 0.1,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2018-3661"
},
{
"trust": 0.1,
"url": "https://www.vulnerability-lab.com/resources/pictures/2133/intel1.jpg"
},
{
"trust": 0.1,
"url": "https://www.vuln-lab.com"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-133692"
},
{
"db": "BID",
"id": "104247"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"db": "PACKETSTORM",
"id": "148496"
},
{
"db": "NVD",
"id": "CVE-2018-3661"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-133692"
},
{
"db": "BID",
"id": "104247"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"db": "PACKETSTORM",
"id": "148496"
},
{
"db": "NVD",
"id": "CVE-2018-3661"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-05-15T00:00:00",
"db": "VULHUB",
"id": "VHN-133692"
},
{
"date": "2018-05-15T00:00:00",
"db": "BID",
"id": "104247"
},
{
"date": "2018-07-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"date": "2018-07-11T15:28:35",
"db": "PACKETSTORM",
"id": "148496"
},
{
"date": "2018-05-15T14:29:00.357000",
"db": "NVD",
"id": "CVE-2018-3661"
},
{
"date": "2018-05-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-06-19T00:00:00",
"db": "VULHUB",
"id": "VHN-133692"
},
{
"date": "2018-05-15T00:00:00",
"db": "BID",
"id": "104247"
},
{
"date": "2018-07-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-005141"
},
{
"date": "2018-06-19T15:40:49.373000",
"db": "NVD",
"id": "CVE-2018-3661"
},
{
"date": "2018-05-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "104247"
},
{
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Intel system Configuration utilities selview.exe and syscfg.exe Buffer error vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-005141"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201805-461"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…