7.8 CVE-2018-19320

CISA Kev Catalog Used by Malware Used by Ransomware Exploit

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
https://nvd.nist.gov/vuln/detail/CVE-2018-19320

References

cve@mitre.org Exploit

http://seclists.org/fulldisclosure/2018/Dec/39 Exploit Mailing List Third Party Advisory
http://www.securityfocus.com/bid/106252 Broken Link Third Party Advisory VDB Entry
https://www.gigabyte.com/Support/Security/1801 Vendor Advisory
https://www.gigabyte.com/tw/Support/Utility/Graphics-Card Product
https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privile... Exploit Third Party Advisory

CPE

cpe	start	end
Configuration 1
cpe:2.3:a:gigabyte:aorus_graphics_engine::::::::		< 1.57
cpe:2.3:a:gigabyte:app_center::::::::		< 19.0422.1
cpe:2.3:a:gigabyte:oc_guru_ii:2.08:::::::*
cpe:2.3:a:gigabyte:xtreme_gaming_engine::::::::		< 1.26

REMEDIATION

EXPLOITS

Exploit-db.com

id	description	date
No known exploits

POC Github

Url
No known exploits

Other Nist (github, ...)

Url
http://seclists.org/fulldisclosure/2018/Dec/39
https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privile...

CAPEC

Common Attack Pattern Enumerations and Classifications

id	description	severity
No entry

Cybersecurity needs ?

Strengthen software security from the outset with our DevSecOps expertise

Integrate security right from the start of the software development cycle for more robust applications and greater customer confidence.
Our team of DevSecOps experts can help you secure your APIs, data pipelines, CI/CD chains, Docker containers and Kubernetes deployments.

Discover this offer