Vulnerability Description
Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Xeon D-1649N Firmware | - |
| Intel | Xeon D-1649N | - |
| Intel | Xeon D-1633N Firmware | - |
| Intel | Xeon D-1633N | - |
| Intel | Xeon D-1637 Firmware | - |
| Intel | Xeon D-1637 | - |
| Intel | Xeon D-1627 Firmware | - |
| Intel | Xeon D-1627 | - |
| Intel | Xeon D-1623N Firmware | - |
| Intel | Xeon D-1623N | - |
| Intel | Xeon D-1622 Firmware | - |
| Intel | Xeon D-1622 | - |
| Intel | Xeon D-1653N Firmware | - |
| Intel | Xeon D-1653N | - |
| Intel | Xeon D-1602 Firmware | - |
| Intel | Xeon D-1602 | - |
| Intel | Xeon D-2141I Firmware | - |
| Intel | Xeon D-2141I | - |
| Intel | Xeon D-2177Nt Firmware | - |
| Intel | Xeon D-2177Nt | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/108485
- https://support.f5.com/csp/article/K85585101
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00223.Vendor Advisory
- http://www.securityfocus.com/bid/108485
- https://support.f5.com/csp/article/K85585101
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00223.Vendor Advisory
FAQ
What is CVE-2019-0119?
CVE-2019-0119 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module...
How severe is CVE-2019-0119?
CVE-2019-0119 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-0119?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Xeon D-1649N Firmware, Intel Xeon D-1649N, Intel Xeon D-1633N Firmware, Intel Xeon D-1633N, Intel Xeon D-1637 Firmware.