SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBHF03601 rev. 4 - Arbitrary Code Execution via Intel Smart Sound Technologies Driver

Related Vulnerabilities: CVE-2018-3666   CVE-2018-3670   CVE-2018-3672  

HP has been informed of potential security vulnerabilities in the Intel Smart Sound Technologies driver module prior to version 9.21.00.354. These vulnerabilities potentially allow a local attacker to execute arbitrary code as administrator via a non-paged pool overflow, a buffer overflow, or a system call.

Potential Security Impact:
Escalation of Privilege
Source: HP, HP Product Security Response Team (PSRT)
Reported by: Intel

VULNERABILITY SUMMARY

HP has been informed of potential security vulnerabilities in the Intel Smart Sound Technologies driver module prior to version 9.21.00.354.
These vulnerabilities potentially allow a local attacker to execute arbitrary code as administrator via a non-paged pool overflow, a buffer overflow, or a system call.
Reference Number
CVE-2018-3666, CVE-2018-3670, CVE-2018-3672, INTEL-SA-00163 (in English), PSR-2019-0010
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
See the RESOLUTION section for impacted products.
BACKGROUND
For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com
CVSS 3.0 Base Metrics
Reference
Base Vector
Base Score
CVE-2018-3666
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
7.5
CVE-2018-3670
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
7.5
CVE-2018-3672
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
7.5
RESOLUTION
HP recommends keeping your system up to date with the latest firmware and drivers.

Business PCs

Product Name
Updated Version
Softpaq #
Softpaq Link
HP Elite x2 1012 G1
10.0.3690.118.Q.50
SP94989
HP Elite x2 1012 G2
10.0.3690.118.Q.50
SP94989
HP Elite x2 1013 G3
12.37.1.102.Q.5
SP95015
HP EliteBook 1030 G1
10.0.3690.118.Q.50
SP94989
HP EliteBook 1040 G4
11.27.3690.134.Q.5
SP95006
HP EliteBook 820 G3
10.0.3690.118.Q.50
SP94989
HP EliteBook 820/828 G4
11.27.3690.134.Q.5
SP95006
HP EliteBook 830 G5
12.37.1.102.Q.5
SP95015
HP EliteBook 840 G3
10.0.3690.118.Q.50
SP94989
HP EliteBook 840 G5
12.37.1.102.Q.5
SP95015
HP EliteBook 840 G5 HC Edition
12.37.1.102.Q.5
SP95015
HP EliteBook 840/848 G4
11.27.3690.134.Q.5
SP95006
HP EliteBook 840r G4
11.27.3690.134.Q.5
SP95006
HP EliteBook 850 G3
10.0.3690.118.Q.50
SP94989
HP EliteBook 850 G4
11.27.3690.134.Q.5
SP95006
HP EliteBook 850 G5
12.37.1.102.Q.5
SP95015
HP EliteBook Folio 1040 G3
10.0.3690.118.Q.50
SP94989
HP EliteBook Folio G1
10.0.3690.118.Q.50
SP94989
HP EliteBook x360 1020 G2
11.49.3690.124.Q.5
SP92177
HP EliteBook x360 1030 G2
11.27.3690.134.Q.5
SP95006
HP EliteBook x360 1030 G3
12.37.1.102.Q.5
SP95015
HP Engage Go Mobile System
9.21.00.3690
SP91512
HP mt21 Mobile Thin Client
9.0.216.0
SP92290
HP Pro x2 612 G2
11.27.3690.134.Q.5
SP95006
HP Pro X2 612 G2 Retail Solution with Retail Case
11.27.3690.134.Q.5
SP95006
HP ProBook 430 G3
10.0.3690.118.Q.50
SP94989
HP ProBook 430 G4
11.27.3690.134.Q.5
SP95006
HP ProBook 430 G5
12.37.1.102.Q.5
SP95015
HP ProBook 440 G3
10.0.3690.118.Q.50
SP94989
HP ProBook 440 G4
11.27.3690.134.Q.5
SP95006
HP ProBook 440 G5
12.37.1.102.Q.5
SP95015
HP ProBook 450 G3
10.0.3690.118.Q.50
SP94989
HP ProBook 450 G4
11.27.3690.134.Q.5
SP95006
HP ProBook 450 G5
12.37.1.102.Q.5
SP95015
HP ProBook 470 G3
10.0.3690.118.Q.50
SP94989
HP ProBook 470 G4
11.27.3690.134.Q.5
SP95006
HP ProBook 470 G5
12.37.1.102.Q.5
SP95015
HP ProBook 640 G2
10.0.3690.118.Q.50
SP94989
HP ProBook 640 G3
11.27.3690.134.Q.5
SP95006
HP ProBook 640 G4
12.37.1.102.Q.5
SP95015
HP ProBook 650 G2
10.0.3690.118.Q.50
SP94989
HP ProBook 650 G3
11.27.3690.134.Q.5
SP95006
HP ProBook 650 G4
12.37.1.102.Q.5
SP95015
HP ProBook x360 440 G1
11.49.3690.124.Q.5
SP95015
HP ZBook 14u G4
11.27.3690.134.Q.5
SP95006
HP ZBook 14u G5
12.37.1.102.Q.5
SP95015
HP ZBook 15 G3
10.0.3690.118.Q.50
SP94989
HP ZBook 15 G4
11.27.3690.134.Q.5
SP95006
HP ZBook 15u G3
10.0.3690.118.Q.50
SP94989
HP ZBook 15u G4
11.27.3690.134.Q.5
SP95006
HP ZBook 15u G5
12.37.1.102.Q.5
SP95015
HP ZBook 17 G3
10.0.3690.118.Q.50
SP94989
HP ZBook 17 G4
11.27.3690.134.Q.5
SP95006
HP ZBook Studio G3
10.0.3690.118.Q.50
SP94989
HP ZBook Studio G4
11.27.3690.134.Q.5
SP95006
HP ZBook x2 G4
11.27.3690.134.Q.5
SP95006
HP ZHAN 66 Pro G1
12.37.1.102.Q.5
SP95015

Consumer PCs

Product Name
Updated Version
Softpaq #
Softpaq Link
HP ENVY 13-ad001 ~ 13-ad099
6.0.1.8569
SP93113
HP ENVY 13-ad100 ~ 13-ad199
6.0.1.8569
SP93113
HP ENVY 13-ah4000 ~ 13-ah4999
6.0.1.8544
SP92549
HP ENVY 13-ah4000 ~ 13-ah4999
6.0.1.8515
SP91852
HP ENVY 17m-ae001 ~ 17m-ae099
6.0.1.8569
SP93113
HP ENVY 17m-ae100 ~ 17m-ae199
6.0.1.8569
SP93113
HP ENVY 17t-bw0000
6.0.1.8509
SP91517
HP ENVY x360 13-ab001 ~ 13-ab099
6.0.1.8569
SP93113
HP ENVY x360 13t-ab000 (CTO)
6.0.1.8569
SP93113
HP ENVY x360 15-bp0xx (ROW)
6.0.1.8393
SP87889
HP ENVY x360 15-bp1xx (ROW)
6.0.1.8393
SP87889
HP ENVY x360 15m-bp1xx (BBY)
6.0.1.8393
SP87889
HP ENVY x360 15m-cn0xxxx
6.0.1.8509
SP91517
HP ENVY x360 15m-cn1xxx
6.0.1.8509
SP91517
HP ENVY x360 m6-bp0xx (BBY)
6.0.1.8393
SP87889
HP Pavilion 15-cs0000 ~ 15-cs0999
6.0.1.8515
SP91852
HP Pavilion 15-cu0000~15-cu0999
6.0.1.8515
SP91852
HP Spectre 13-ab000 ~ 13-ab099
6.0.1.8536
SP92752
HP Spectre 13-ae0xx
6.0.1.8536
SP92752
HP Spectre 13-af0xx
6.0.1.8510
SP92017
HP Spectre 13-af1xx
6.0.1.8510
SP92017
HP Spectre 15-bl000 ~ 15-bl099
6.0.1.8536
SP92752
HP Spectre 15-ch0xx
6.0.1.8536
SP92752
HP Spectre x2 12-c000~12c-c099
6.0.1.8544
SP92527
HP Spectre x360 13-w000 ~ 13-w099
6.0.1.8536
SP92752
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, visit https://www.hp.com/go/contacthp to learn about your HP support options.
Report: To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://www.hp.com/go/alerts.
Security Bulletin Archive: To view released Security Bulletins, search the HP Support Site for "security bulletin".
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
PI
HP Printing and Imaging
HF
HP Hardware and Firmware
GN
HP General Software
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
To get the security-alert PGP key, please send an e-mail message as follows:
Subject: get key
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin.HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action.HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin.To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."
REVISION HISTORY : Version 1: 18 January 2019 Initial release; Version 2: 25 January 2019 Updated softpaq and version information for Commerical PC systems; Version 3: 30 August 2019 Replaced all Business PC entries with updated versions and URL; Version 4: 14 October 2019 Updated Softpaqs for Consumer PC.