Intel修复多个误差危害通告

宣布时间 2020-01-16

误差编号和级别


CVE编号：CVE-2019-14613，危险级别：高危，CVSS分值：厂商自评：8.2，官方未评定

CVE编号：CVE-2019-14601，危险级别：中危，CVSS分值：厂商自评：6.7，官方未评定

CVE编号：CVE-2019-14600，危险级别：中危，CVSS分值：厂商自评：6.5，官方未评定

CVE编号：CVE-2019-14615，危险级别：中危，CVSS分值：厂商自评：6.3，官方未评定

CVE编号：CVE-2019-14596，危险级别：中危，CVSS分值：厂商自评：5.9，官方未评定

CVE编号：CVE-2019-14629，危险级别：低危，CVSS分值：厂商自评：3.9，官方未评定


影响版本


CVE-2019-14613

Intel? VTune? Amplifier for Windows* before update 8.


CVE-2019-14601

Intel? RWC 3 for Windows* before version 7.010.009.000.


CVE-2019-14600

Intel? SNMP Subagent Stand-Alone Advisory for Windows* all versions.


CVE-2019-14615

3rd Generation Intel? Core? Processors *

4th Generation Intel? Core? Processors *

6th Generation Intel? Core? Processors

7th Generation Intel? Core? Processors

8th Generation Intel? Core? Processors

9th Generation Intel? Core? Processors

10th Generation Intel? Core? Processors

Intel? Xeon? Processor E3 v2 Family *

Intel? Xeon? Processor E3 v3 Family *

Intel? Xeon? Processor E3 v5 Family

Intel? Xeon? Processor E3 v6 Family

Intel? Xeon? Processor E-2100 Family

Intel? Xeon? Processor E-2200 Family

Intel? Pentium? Processor A1000 Series *

Intel? Pentium? Processor 2000 Series *

Intel? Pentium? Processor 3500 Series *

Intel? Pentium? Processor 4000 Series

Intel? Pentium? Processor G2000 Series *

Intel? Pentium? Processor G3000 Series *

Intel? Pentium? Processor G4000 Series

Intel? Pentium? Processor J2000 Series *

Intel? Pentium? Processor J3000 Series

Intel? Pentium? Processor J4000 Series

Intel? Pentium? Processor N3500 Series *

Intel? Pentium? Processor N3700 Series

Intel? Pentium? Processor N4000 Series

Intel? Pentium? Processor Silver Series

Intel? Pentium? Processor Gold Series

Intel? Celeron? Processor 927UE *

Intel? Celeron? Processor 1000 Series *

Intel? Celeron? Processor 2000 Series

Intel? Celeron? Processor 3800 Series

Intel? Celeron? Processor 3900 Series

Intel? Celeron? Processor 4000 Series

Intel? Celeron? Processor 5000 Series

Intel? Celeron? Processor G1000 Series *

Intel? Celeron? Processor G3000 Series

Intel? Celeron? Processor G4000 Series

Intel? Celeron? Processor J1000 Series *

Intel? Celeron? Processor J3000 Series

Intel? Celeron? Processor J4000 Series

Intel? Celeron? Processor N2000 Series *

Intel? Celeron? Processor N3000 Series

Intel? Celeron? Processor N4000 Series

Intel? Celeron? Processor G3900 Series

Intel? Celeron? Processor G4900 Series

Intel? Atom? Processor A Series

Intel? Atom? Processor E Series *

Intel? Atom? Processor X Series

Intel? Atom? Processor Z Series *


CVE-2019-14596

Intel? Chipset Device Software INF Utility before version 10.1.18


CVE-2019-14629

Intel? DAAL before version 2020 Gold.


误差概述


Intel为2020年1月补丁日修复的六个清静误差宣布了六个清静通告，只管Intel体现没有证据显示这些误差已经被野外使用，但建议用户尽快装置更新。其中有两个误差值得注重：编号为CVE-2019-14613的第一个误差影响Windows版的Intel VTune Amplifier，该误差可能允许外地攻击者提升自己的权限；编号为CVE-2019-14615的第二个误差影响种种处置惩罚器(包括最新的第十代Ice Lake处置惩罚器)上的Windows和Linux图形驱动程序，该误差可能导致信息泄露。


误差验证


暂无POC/EXP。


修复建议


Intel已宣布更新，下载链接见参考链接。


参考链接


https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00325.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00308.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00300.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00314.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00306.html

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00332.html