Windows 10: Intel VTune Amplifier 2018 Update 3 Advisory

Brink · Dec 12, 2018

Intel ID: INTEL-SA-00194 Advisory Category: Software Impact of vulnerability: Escalation of Privilege Severity rating: MEDIUM Original release: 12/11/2018 Last revised: 12/11/2018
Summary:

A potential security vulnerability in Intel® VTune Amplifier 2018 may allow Escalation of Privilege. Intel is releasing VTune Amplifier updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2018-18093

Description: Improper file permissions in the installer for Intel(R) VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access.

CVSS Base Score: 4.8 Medium

CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Affected Products:

Intel(R) VTune Amplifier 2018 Update 3 and before.

Recommendations:

Intel recommends that users update to Intel® VTune Amplifier 2019 Update 1 or later.

Updates are available for download at this location: https://registrationcenter.intel.com

Acknowledgements:

This issue was found internally by Intel.

Revision History

Revision Date Description 1.0 12/11/2018 Initial Release
Click to expand...

Source: INTEL-SA-00194

:)

Brink · Dec 12, 2018

Updates for Surface Pro 3 - Feb. 20, 2018

We've released a new driver and firmware update for Surface Pro 3. This update includes new firmware for Surface UEFI which resolves potential security vulnerabilities, including Microsoft security advisory 180002.

This update is available in MSI format from the Surface Pro 3 Drivers and Firmware page at the Microsoft Download Center. Click Download to download the following file:

SurfacePro3_Win10_15063_1801002_3.msi

For your reference, here is the driver version that is updated in this release and the improvement it provides:

Surface Pro 3:

Surface UEFI (v3.11.2350.0) resolves potential security vulnerabilities, including Microsoft security advisory 180002.

Click to expand...

Source: Updates for Surface Pro 3 (20 February 2018) Surface

See also: Surface Pro 3 update history

Brink · Dec 12, 2018

Intel RAID Web Server 3 Service Advisory for security vulnerability

[table][tr]Intel ID: INTEL-SA-00171 [/tr] [tr][td]Advisory Category:[/td] [td]Software[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Information Disclosure[/td] [/tr] [tr][td]Severity rating:[/td] [td]MEDIUM[/td] [/tr] [tr][td]Original release:[/td] [td]10/09/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]10/09/2018[/td] [/tr] [/table]

Summary:

A potential security vulnerability in the Intel® Raid Web Server 3 may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2018-12161

Description: Insufficient session validation in the webserver component of the Intel(R) Rapid Web Server 3 may allow an unauthenticated user to potentially disclose information via network access.

CVSS Base Score: 5.3 Medium

CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected Products:

Intel® RAID Web Console for Windows version 3 and before.

Recommendations:

Intel recommends that users of Intel® RAID Web Console for Windows update to version 4.186 or later.

Updates are available for download at this location: https://downloadcenter.intel.com/dow...3-for-Windows-

Acknowledgements:

Intel would like to thank Trotmaster for reporting this issue and working with us on coordinated disclosure.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]10/09/2018[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00171

Brink · Dec 12, 2018

Intel Centrino Wireless-N and Advanced-N Bluetooth Driver Advisory

[table][tr]Intel ID: INTEL-SA-00177 [/tr] [tr][td]Advisory Category:[/td] [td]Firmware[/td] [/tr] [tr][td]Impact of vulnerability:[/td] [td]Denial of Service[/td] [/tr] [tr][td]Severity rating:[/td] [td]MEDIUM[/td] [/tr] [tr][td]Original release:[/td] [td]09/11/2018[/td] [/tr] [tr][td]Last revised:[/td] [td]09/11/2018[/td] [/tr] [/table]

Summary:

A potential security vulnerability in ibtfltcoex.sys driver for Intel® Centrino® Wireless adapters may allow denial of service.

Vulnerability Details:

CVEID: CVE-2018-3669

Description: A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel® Centrino® Wireless N and Intel® Centrino® Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel® Bluetooth device via the network.

CVSS Base Score: 5.9 Medium

CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

Intel® Centrino® Wireless-N 135

Intel® Centrino® Wireless-N 2230

Intel® Centrino® Advanced-N 6235

Intel® Centrino® Wireless-N 130

Intel® Centrino® Wireless-N 1030

Intel® Centrino® Advanced-N 6230

No software updates will be made available for the Intel® Centrino® Wireless adapters listed above. These products reached end-of-life status in 2014 or 2015.

Recommendations:

Intel recommends that end-users disable the Bluetooth adapters listed above or replace them with wireless adapters that are currently under active support.

Acknowledgements:

Intel would like to thank Matias Karhumaa for reporting this issue and working with us on coordinated disclosure.

Revision History

[table][tr]Revision Date Description [/tr] [tr][td]1.0[/td] [td]09/11/2018[/td] [td]Initial Release[/td] [/tr] [/table]
Click to expand...

Source: INTEL-SA-00177

Windows 10: Intel VTune Amplifier 2018 Update 3 Advisory

Intel VTune Amplifier 2018 Update 3 Advisory

Intel VTune Amplifier 2018 Update 3 Advisory

Intel VTune Amplifier 2018 Update 3 Advisory

Intel VTune Amplifier 2018 Update 3 Advisory - Similar Threads - Intel VTune Amplifier

Intel NUC Vulnerability Advisory

Intel NUC Firmware Advisory

Intel RAID Web Console 3 (RWC3) for Windows Advisory

Intel Accelerated Storage Manager in Intel RSTe Advisory

Intel OpenVINO 2018 for Linux Advisory - Feb. 12

Intel Integrated Performance Primitives (Intel IPP) Advisory

Intel RAID Web Server 3 Service Advisory for security vulnerability

Intel Platform Trust Technology (PTT) Update Advisory

Advisory on July 2018 .NET Framework Updates

Users found this page by searching for:

Intel VTune Amplifier for Windows Advisory