CVE-2018-12193
published 2018-10-10CVE-2018-12193: Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially…
PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.36%
28.1th percentile
Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially disclose information via local access.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | quickassist_technology | < 4.2 | 4.2 |
| intel_corporation | intel_quickassit_technology_for_linux | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pwcp-jwjx-3jgm: Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4
ghsa_unreviewed·2022-05-13
CVE-2018-12193 [MEDIUM] GHSA-pwcp-jwjx-3jgm: Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4
Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially disclose information via local access.
Red Hat
kernel: insufficient access control in Intel QuickAssist Technology
vendor_redhat·2018-09-10·CVSS 5.5
CVE-2018-12193 [MEDIUM] CWE-284 kernel: insufficient access control in Intel QuickAssist Technology
kernel: insufficient access control in Intel QuickAssist Technology
Insufficient access control in driver stack for Intel QuickAssist Technology for Linux before version 4.2 may allow an unprivileged user to potentially disclose information via local access.
A flaw was found in Intel QuickAssist Technology for Linux before version 4.2. An insufficient access control in the driver stack may allow an unprivileged user to potentially disclose information via local access.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-alt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: ke
No detection rules found.
No public exploits indexed.
2018-10-10
Published