Vulnerability Description
Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Baseboard Management Controller Firmware | < 2.18 |
| Intel | Bbs2600Bpb | - |
| Intel | Bbs2600Bpbr | - |
| Intel | Bbs2600Bpq | - |
| Intel | Bbs2600Bpqr | - |
| Intel | Bbs2600Bps | - |
| Intel | Bbs2600Bpsr | - |
| Intel | Bbs2600Stb | - |
| Intel | Bbs2600Stbr | - |
| Intel | Bbs2600Stq | - |
| Intel | Bbs2600Stqr | - |
| Intel | Hns2600Bpb | - |
| Intel | Hns2600Bpb24 | - |
| Intel | Hns2600Bpb24R | - |
| Intel | Hns2600Bpb24Rx | - |
| Intel | Hns2600Bpblc | - |
| Intel | Hns2600Bpblc24 | - |
| Intel | Hns2600Bpblc24R | - |
| Intel | Hns2600Bpblcr | - |
| Intel | Hns2600Bpbr | - |
Related Weaknesses (CWE)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.Vendor Advisory
FAQ
What is CVE-2019-11178?
CVE-2019-11178 is a vulnerability with a CVSS score of 8.1 (HIGH). Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access.
How severe is CVE-2019-11178?
CVE-2019-11178 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-11178?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Baseboard Management Controller Firmware, Intel Bbs2600Bpb, Intel Bbs2600Bpbr, Intel Bbs2600Bpq, Intel Bbs2600Bpqr.