F5 Networks BIG-IP : Intel I210 network adapter vulnerability (K37283878)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K37283878 advisory. - Improper initialization in the firmware for the IntelR Ethernet I210 Controller series of network adapters before...

CVE-2021-0114: Initialization of a Resource with an Insecure Default

Unchecked return value in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

Improper access control

Improper access control in kernel mode driver for some IntelR NUC 9 Extreme Laptop Kits before version 2.2.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0008: Uncontrolled Resource Consumption

Uncontrolled resource consumption in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow privileged user to potentially enable denial of service via local access...

CVE-2021-0003: Improper Handling of Exceptional Conditions

Improper conditions check in some IntelR Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0084: Improper Input Validation

Improper input validation in the IntelR Ethernet Controllers X722 and 800 series Linux RMDA driver before version 1.3.19 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0083: Improper Input Validation

Improper input validation in some IntelR OptaneTM PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0062: Improper Input Validation

Improper input validation in some IntelR Graphics Drivers before version 27.20.100.8935 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0007: Improper Handling of Exceptional Conditions

Uncaught exception in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.1.0 may allow a privileged attacker to potentially enable denial of service via local access...

CVE-2021-0004: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in the firmware of IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0196: Undefined Security Weakness

Improper access control in kernel mode driver for some IntelR NUC 9 Extreme Laptop Kits before version 2.2.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0005: Improper Handling of Exceptional Conditions

Uncaught exception in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0002: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in some IntelR Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure or denial of service via local access...

CVE-2021-0012: Use After Free

Use after free in some IntelR Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-0061: Improper Initialization

Improper initialization in some IntelR Graphics Driver before version 27.20.100.9030 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0160: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0009: Out-of-bounds Read

Out-of-bounds read in the firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0006: Improper Handling of Exceptional Conditions

Improper conditions check in firmware for IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.4.0 may allow a privileged user to potentially enable denial of service via local access...

Oracle Linux 8 : microcode_ctl (ELSA-2021-2308)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2308 advisory. 4:20210216-1.20210525.0.1 - add support for UEK6 kernels - remove no longer appropriate caveats for 06-2d-07 and 06-55-04 4:20210216-1.20210525.1 -...

CVE-2021-0143: Incorrect Default Permissions

Improper permissions in the installer for the IntelR Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access...