CVE-2019-0158

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient path checking in the installation package for Intel(R) Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) Graphics Performance Analyzer for Linux Advisory	Versions 18.4 and before.

References

http://www.securityfocus.com/bid/107888Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00236.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/107888Third Party Advisory, VDB Entry
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00236.htmlPatch, Vendor Advisory

Timeline

Published: Apr 17, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-01597.8Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version 24.3 may allow an authenticate CVE-2019-01609.8Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of CVE-2019-01615.5Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.CVE-2019-01623.8Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable information disclosur CVE-2019-01638.2Insufficient input validation in system firmware for Intel(R) Broadwell U i5 vPro before version MYBDWi5v.86A may allow an authenticated use CVE-2019-01647.3Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenti CVE-2019-01654.4Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to CVE-2019-01667.5Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthe CVE-2019-01684.4Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions CVE-2019-01698.8Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.CVE-2019-01706.7Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privileg CVE-2019-01717.8Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escal