CVE-2018-18090: Medium severity intel graphics driver for windows vulnerability

Published Mar 14, 2019

Updated

Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable denial of service via local access.

Affected Software

23 affected components

Intel Graphics Driver Windows=15.33.43.4425

Intel Graphics Driver Windows=15.33.45.4653

Intel Graphics Driver Windows=15.33.46.4885

Intel Graphics Driver Windows=15.36.26.4294

Intel Graphics Driver Windows=15.36.28.4332

Intel Graphics Driver Windows=15.36.31.4414

Intel Graphics Driver Windows=15.36.33.4578

Intel Graphics Driver Windows=15.36.34.4889

Intel Graphics Driver Windows=15.40.34.4624

Intel Graphics Driver Windows=15.40.36.4703

Intel Graphics Driver Windows=15.40.37.4835

Intel Graphics Driver Windows=15.40.38.4963

Intel Graphics Driver Windows=15.40.41.5058

Intel Graphics Driver Windows=15.45.18.4664

Intel Graphics Driver Windows=15.45.19.4678

Intel Graphics Driver Windows=15.45.21.4821

Intel Graphics Driver Windows=15.45.23.4860

Intel Graphics Driver Windows=24.20.100.6025

Intel Graphics Driver Windows=24.20.100.6094

Intel Graphics Driver Windows=24.20.100.6136

Intel Graphics Driver Windows=24.20.100.6194

Intel Graphics Driver Windows=24.20.100.6229

Intel Graphics Driver Windows=24.20.100.6286

Remediation

Patch Available

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html

Event History

Mar 14, 2019

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-18090?

The severity of CVE-2018-18090 is rated as high due to the potential for denial of service.

How do I fix CVE-2018-18090?

To fix CVE-2018-18090, update the Intel Graphics Driver to a version that is not affected, specifically versions 10.18.x.5059 or later.

Which Intel Graphics Driver versions are affected by CVE-2018-18090?

Affected versions include Intel Graphics Driver versions prior to 10.18.x.5059, 15.33.x.5059, 15.36.x.5057, and others listed in the vulnerability details.

Can CVE-2018-18090 be exploited remotely?

CVE-2018-18090 requires authenticated access, meaning it cannot be exploited remotely without authentication.

What impact does CVE-2018-18090 have on systems?

The impact of CVE-2018-18090 includes potential denial of service, which can disrupt normal operations on affected systems.