CVE-2020-0584 Memory corruption in Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series

What is CVE-2020-0584?

CVE-2020-0584 is a medium-severity memory corruption vulnerability in Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series, published on 12 Nov 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a denial of service via local access.

Weakness: CWE-120

Which versions are affected by CVE-2020-0584?

It affects 4 products.

Products include Intel Optane Ssd 900p Firmware, Intel Optane Ssd 905p Firmware, Intel Ssd Dc P4800x Firmware, Intel Ssd Dc P4801x Firmware.

How do I fix CVE-2020-0584?

No fix has been published for CVE-2020-0584 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2020-0584 being exploited?

There is no known exploitation of CVE-2020-0584 in the wild and no public exploit code.

Other vulnerabilities in Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series

• CVE-2020-12309 Hardcoded credentials in Intel(R) Client SSDs and some Intel(R) Data Center SSDs Medium 4.6
• CVE-2020-12310 Information disclosure in Intel(R) Client SSDs and some Intel(R) Data Center SSDs Medium 4.6
• CVE-2020-12311 Information disclosure in Intel(R) Client SSDs and some Intel(R) Data Center SSDs Medium 4.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jq6x-x622-p39c.