First published: Fri May 17 2019(Updated: )
Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel Quartus II | >=9.1<=15.0 | |
Intel Quartus Prime | >=15.1<=18.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-0171 is a vulnerability in the installer for Intel(R) Quartus(R) software that may allow an authenticated user to potentially enable escalation of privilege via local access.
The severity of CVE-2019-0171 is high with a score of 7.8.
Intel Quartus II versions 9.1 to 15.0 and Intel Quartus Prime versions 15.1 to 18.1 are affected by CVE-2019-0171.
An authenticated user can exploit CVE-2019-0171 by taking advantage of improper directory permissions in the installer for Intel(R) Quartus(R) software.
You can find more information about CVE-2019-0171 in the following references: [Link 1](https://support.f5.com/csp/article/K33245306) and [Link 2](https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00244.html).