CVE-2018-12153
Last modified
CVE-2018-12153 is a vulnerability of currently unknown severity. Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user from a virtual machine guest to potentially crash the host system via local access.. EPSS estimates a 0.44% chance of exploitation in the next 30 days.
Description
Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user from a virtual machine guest to potentially crash the host system via local access.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Graphics Driver | 15.33.43.4425 |
| Intel | Graphics Driver | 15.33.45.4653 |
| Intel | Graphics Driver | 15.33.46.4885 |
| Intel | Graphics Driver | 15.33.47.5059 |
| Intel | Graphics Driver | 15.36.26.4294 |
| Intel | Graphics Driver | 15.36.28.4332 |
| Intel | Graphics Driver | 15.36.31.4414 |
| Intel | Graphics Driver | 15.36.33.4578 |
| Intel | Graphics Driver | 15.36.34.4889 |
| Intel | Graphics Driver | 15.36.35.5057 |
| Intel | Graphics Driver | 15.40.34.4624 |
| Intel | Graphics Driver | 15.40.36.4703 |
| Intel | Graphics Driver | 15.40.37.4835 |
| Intel | Graphics Driver | 15.40.38.4963 |
| Intel | Graphics Driver | 15.40.41.5058 |
References
- http://www.securityfocus.com/bid/105582Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/105582Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-12153?
How severe is CVE-2018-12153?
How do I fix CVE-2018-12153?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-12148Privilege escalation in file permissions in Intel Driver and…
- CVE-2018-12149Buffer overflow in input handling in Intel Extreme Tuning Ut…
- CVE-2018-1215An arbitrary file upload vulnerability was discovered in vAp…
- CVE-2018-12150Escalation of privilege in Installer for Intel Extreme Tunin…
- CVE-2018-12151Buffer overflow in installer for Intel Extreme Tuning Utilit…
- CVE-2018-12152Pointer corruption in Unified Shader Compiler in Intel Graph…
- CVE-2018-12154Denial of Service in Unified Shader Compiler in Intel Graphi…
- CVE-2018-12155Data leakage in cryptographic libraries for Intel IPP before…
- CVE-2018-12156Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12157Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12158Insufficient input validation in BIOS update utility in Inte…
- CVE-2018-12159Buffer overflow in the command-line interface for Intel(R) P…
Are you affected by CVE-2018-12153?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
