CVE-2020-12289 Memory corruption in Intel(R) Thunderbolt(TM) controllers

Medium 5.5 Published 9 Jun 2021 Updated 4 Aug 2024

An authenticated local attacker can cause a denial of service via an out-of-bounds write in Intel Thunderbolt controllers.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-12289?

CVE-2020-12289 is a medium-severity memory corruption vulnerability in Intel(R) Thunderbolt(TM) controllers, published on 9 Jun 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.

Weakness: CWE-787

Which versions are affected by CVE-2020-12289?

It affects 13 products.

Products include Intel Dsl5320 Thunderbolt 2 Firmware, Intel Dsl5520 Thunderbolt 2 Firmware, Intel Dsl6340 Thunderbolt 3 Firmware, Intel Dsl6540 Thunderbolt 3 Firmware, Intel Jhl6240 Thunderbolt 3 Firmware, Intel Jhl6340 Thunderbolt 3 Firmware and 7 more.

How do I fix CVE-2020-12289?

No fix has been published for CVE-2020-12289 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2020-12289 being exploited?

There is no known exploitation of CVE-2020-12289 in the wild and no public exploit code.

Sources

Also known as GHSA-6q8h-w49w-rg9j.