CVE-2018-3658

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-772

Affected software

Vendor	Product	Versions
Intel Corporation	Intel(R) Active Management Technology	Versions before 12.0.5.

References

http://www.securityfocus.com/bid/106996Third Party Advisory, VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdfPatch, Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05Third Party Advisory, US Government Resource
https://security.netapp.com/advisory/ntap-20180924-0003/Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_usThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.htmlVendor Advisory
http://www.securityfocus.com/bid/106996Third Party Advisory, VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-377318.pdfPatch, Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-043-05Third Party Advisory, US Government Resource
https://security.netapp.com/advisory/ntap-20180924-0003/Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03876en_usThird Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.htmlVendor Advisory

Timeline

Published: Sep 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-36596.8A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unau CVE-2018-36615.5Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash t CVE-2018-36628.0Escalation of privilege in Intel Saffron MemoryBase before version 11.4 potentially allows an authorized user of the Saffron application to CVE-2018-36635.7Escalation of privilege in Intel Saffron MemoryBase before 11.4 allows an authenticated user access to privileged information.CVE-2018-36655.6System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local pr CVE-2018-36668.8Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a CVE-2018-36677.8Installation tool IPDT (Intel Processor Diagnostic Tool) 4.1.0.24 sets permissions of installed files incorrectly, allowing for execution of CVE-2018-36687.8Unquoted service paths in Intel Processor Diagnostic Tool (IPDT) before version 4.1.0.27 allows a local attacker to potentially execute arbi CVE-2018-36697.5A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthent CVE-2018-36708.8Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a CVE-2018-36715.7Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information.CVE-2018-36728.8Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as a