CVE-2019-0119
Last modified
CVE-2019-0119 is a vulnerability of currently unknown severity. Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.. EPSS estimates a 0.43% chance of exploitation in the next 30 days.
Description
Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Xeon D-1649n Firmware | All versions |
| Intel | Xeon D-1633n Firmware | All versions |
| Intel | Xeon D-1637 Firmware | All versions |
| Intel | Xeon D-1627 Firmware | All versions |
| Intel | Xeon D-1623n Firmware | All versions |
| Intel | Xeon D-1622 Firmware | All versions |
| Intel | Xeon D-1653n Firmware | All versions |
| Intel | Xeon D-1602 Firmware | All versions |
| Intel | Xeon D-2141i Firmware | All versions |
| Intel | Xeon D-2177nt Firmware | All versions |
| Intel | Xeon D-2161i Firmware | All versions |
| Intel | Xeon D-2143it Firmware | All versions |
| Intel | Xeon D-2146nt Firmware | All versions |
| Intel | Xeon D-2145nt Firmware | All versions |
| Intel | Xeon D-2123it Firmware | All versions |
| Intel | Xeon D-2173it Firmware | All versions |
| Intel | Xeon D-2191 Firmware | All versions |
| Intel | Xeon D-2187nt Firmware | All versions |
| Intel | Xeon D-2142it Firmware | All versions |
| Intel | Xeon D-2163it Firmware | All versions |
| Intel | Xeon D-2183it Firmware | All versions |
| Intel | Xeon D-2166nt Firmware | All versions |
| Intel | Xeon D-1513n Firmware | All versions |
| Intel | Xeon D-1533n Firmware | All versions |
| Intel | Xeon D-1553n Firmware | All versions |
| Intel | Xeon D-1523n Firmware | All versions |
| Intel | Xeon D-1543n Firmware | All versions |
| Intel | Xeon D-1559 Firmware | All versions |
| Intel | Xeon D-1529 Firmware | All versions |
| Intel | Xeon D-1539 Firmware | All versions |
| Intel | Xeon D-1567 Firmware | All versions |
| Intel | Xeon D-1557 Firmware | All versions |
| Intel | Xeon D-1577 Firmware | All versions |
| Intel | Xeon D-1571 Firmware | All versions |
| Intel | Xeon D-1528 Firmware | All versions |
| Intel | Xeon D-1541 Firmware | All versions |
| Intel | Xeon D-1518 Firmware | All versions |
| Intel | Xeon D-1521 Firmware | All versions |
| Intel | Xeon D-1531 Firmware | All versions |
| Intel | Xeon D-1548 Firmware | All versions |
| Intel | Xeon D-1527 Firmware | All versions |
| Intel | Xeon D-1537 Firmware | All versions |
| Intel | Xeon D-1540 Firmware | All versions |
| Intel | Xeon D-1520 Firmware | All versions |
| Intel | Xeon Platinum Processors Firmware | All versions |
| Intel | Xeon Gold Processors Firmware | All versions |
| Intel | Xeon Silver Processors Firmware | All versions |
| Intel | Xeon Bronze Processors Firmware | All versions |
| Intel | Server Board S2600wf Firmware | All versions |
| Intel | Server Board S2600bp Firmware | All versions |
Showing 50 of 92 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-0119?
How severe is CVE-2019-0119?
How do I fix CVE-2019-0119?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-0113Insufficient bounds checking in Intel(R) Graphics Drivers be…
- CVE-2019-0114A race condition in Intel(R) Graphics Drivers before version…
- CVE-2019-0115Insufficient input validation in KMD module for Intel(R) Gra…
- CVE-2019-0116An out of bound read in KMD module for Intel(R) Graphics Dri…
- CVE-2019-0117Insufficient access control in protected memory subsystem fo…4.4
- CVE-2019-0118Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-0120Insufficient key protection vulnerability in silicon referen…
- CVE-2019-0121Improper permissions in Intel(R) Matrix Storage Manager 8.9.…
- CVE-2019-0122Double free in Intel(R) SGX SDK for Linux before version 2.2…
- CVE-2019-0123Insufficient memory protection in Intel(R) 6th Generation Co…7.8
- CVE-2019-0124Insufficient memory protection in Intel(R) 6th Generation Co…7.8
- CVE-2019-0125Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2019-0119?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
