CVE-2017-5706

Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code.

Score

CVSS 3.0 7.8 High

Status

Modified - secure@intel.com

Published

2017-11-21

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Server Platform Services Firmware (Intel)
• Server Platform Services (Intel Corporation)

References

• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• http://www.securityfocus.com/bid/101906
• http://www.securitytracker.com/id/1039955
• https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
• https://security.netapp.com/advisory/ntap-20171120-0001/
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
• https://twitter.com/PTsecurity_UK/status/938447926128291842
• https://www.asus.com/News/wzeltG5CjYaIwGJ0