CVE Feed

    Dashboard / CVE / CVE-2017-5706

    CVE-2017-5706

    Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code.

    Published:Nov 21, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 21, 2017
    EPSS Score:0.00146
    CVSS Score:7.8

    Affected Products

    Vendor
    Intel
    Product
    Server Platform Services Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-29515 (CVSS 6) — Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.0…
    CVE-2022-29466 (CVSS 7.3) — Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authe…
    CVE-2022-26074 (CVSS 4.4) — Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_0…
    CVE-2019-11109 (CVSS 4.4) — Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 …
    CVE-2019-11090 (CVSS 5.9) — Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70,…
    CVE-2018-12147 (CVSS 6.7) — Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platfo…
    CVE-2019-0099 (CVSS 6.8) — Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 ma…
    CVE-2018-12192 (CVSS 6.8) — Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R)…
    CVE-2018-12191 (CVSS 7.6) — Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel…
    CVE-2018-12208 (CVSS 7.6) — Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and …

    References

    http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
    http://www.securityfocus.com/bid/101906
    http://www.securitytracker.com/id/1039955
    https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
    https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
    https://security.netapp.com/advisory/ntap-20171120-0001/
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
    https://twitter.com/PTsecurity_UK/status/938447926128291842
    https://www.asus.com/News/wzeltG5CjYaIwGJ0
    http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
    http://www.securityfocus.com/bid/101906
    http://www.securitytracker.com/id/1039955
    https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
    https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
    https://security.netapp.com/advisory/ntap-20171120-0001/
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03798en_us
    https://twitter.com/PTsecurity_UK/status/938447926128291842
    https://www.asus.com/News/wzeltG5CjYaIwGJ0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High