CVE-2019-11126: Buffer Overflow

Published Jun 13, 2019

Updated

Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.

Affected Software

42 affected components

Intel Nuc Kit Firmware

Intel Nuc Kit Nuc8i3bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_d34010wyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_d54250wyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_de3815tyb

Intel Nuc Kit Nuc8i3bex=nuc_kit_dn2820fykh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5cpyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i3myx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i3ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i5myx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i5ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5i7ryx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5pgyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc5ppyh

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6cayx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i3syx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i5syx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc6i7kyk

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7cjy

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i3bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i3dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i5bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i5dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i7bnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7i7dnx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc7pjy

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i3cyx

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i5bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7bex

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7hnk

Intel Nuc Kit Nuc8i3bex=nuc_kit_nuc8i7hvk

Intel Compute Card Firmware

Intel Compute Card Cd1c64gk

Intel Compute Card Cd1iv128mk

Intel Compute Card Cd1m3128mk

Intel Compute Card Cd1p64gk

Intel Compute Stick Firmware

Intel Compute Stick Stck1a32wfc

Intel Compute Stick Stck1a8lfc

Intel Compute Stick Stk2m364cc

Intel Compute Stick Stk2m3w64cc

Intel Compute Stick Stk2mv64cc

Remediation

Patch Available

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html?wapkw=2019-11129

Event History

Jun 13, 2019

CVE Published

via MITRE·03:36 PM

Data Sourced

via MITRE·03:36 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-11126?

CVE-2019-11126 is a vulnerability related to pointer corruption in the system firmware for Intel NUC Kit, which may allow a privileged user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.

How severe is CVE-2019-11126?

CVE-2019-11126 has a severity rating of 6.7, which is considered medium.

Which software versions are affected by CVE-2019-11126?

The system firmware for Intel NUC Kit is affected by CVE-2019-11126.

How can a privileged user exploit CVE-2019-11126?

A privileged user can potentially exploit CVE-2019-11126 to enable escalation of privilege, denial of service, and/or information disclosure through local access.

Where can I find more information about CVE-2019-11126?

You can find more information about CVE-2019-11126 on the Intel Security Advisory page and the SecurityFocus website.