Intel(R) Data Center GPU Flex Series for Windows driver

CVE-2024-36292
HIGH 8.2

En bref

Source
NVD
EPSS
EPSS 0.17 % · centile 7 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
intel
Statut NVD
Deferred

Description

Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access.

Faiblesses (CWE)

  • CWE-119 — Opération hors des limites d'un tampon mémoire

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 4.0HIGH 8.2CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:Hintel
CVSS 3.1HIGH 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:Hintel
CVSS 4.0HIGH 8.2CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · secure@intel.com (Secondary)
CVSS 3.1HIGH 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:HNVD · secure@intel.com (Secondary)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Intel(R) Data Center GPU Flex Series for Windows driveraffected before version 31.0.101.4314

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD