UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets due to a lack of privilege checking in the Network Adapter service...

PT-2024-14544 · Unknown · Network Adapter Service

Name of the Vulnerable Software and Affected Versions: Network Adapter Service affected versions not specified Description: The issue is related to a possible missing permission check in the Network Adapter Service. This could lead to a local denial of service with no additional execution...

CVE-2022-23087 Bhyve e82545 device emulation out-of-bounds write

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload "TSO". The e1000 device model uses an on-stack buffer to generat...

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability.

...

K37283878: Intel I210 network adapter vulnerability CVE-2020-0522

Security Advisory Description Improper initialization in the firmware for the IntelR Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access. CVE-2020-0522 Impact The BIG-IP management network por...

K83504933: Intel I210 network adapter vulnerability CVE-2020-0524

Security Advisory Description Improper default permissions in the firmware for the IntelR Ethernet I210 Controller series of network adapters before version 3.30 may allow an authenticated user to potentially enable denial of service via local access. CVE-2020-0524 Impact The BIG-IP management...

CVE-2022-41314

Uncontrolled search path in some IntelR Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41314

Uncontrolled search path in some IntelR Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path in some IntelR Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41314

The CVE-2022-41314 issue is an Intel Network Adapter installer vulnerability caused by an uncontrolled search path, enabling local privilege escalation for an authenticated user. Intel lists affected components as Administrative Tools for Intel Network Adapters software prior to version 27.3 and ...

CVE-2022-41314

Uncontrolled search path in some IntelR Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41314

Uncontrolled search path in some IntelR Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-13969 · Intel · Intel Network Adapter Installer

Name of the Vulnerable Software and Affected Versions: IntelR Network Adapter installer software affected versions not specified Description: The issue is related to an uncontrolled search path in some IntelR Network Adapter installer software. This may allow an authenticated user to potentially...

Intel® Network Adapter Software Advisory

Summary: A potential security vulnerability in some Intel® Network Adapter installer software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-41314 Description: Uncontrolled search path in some...

IBM PowerVM Hypervisor Misconfiguration Vulnerability

IBM PowerVM Hypervisor is an application from International Business Machines IBM, Inc. Providing a secure and scalable virtualized environment, these applications are built on the advanced RAS capabilities and leading performance of the Power Systems platform. A misconfiguration vulnerability...

CVE-2022-34331

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...

CVE-2022-34331

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...

Design/Logic Flaw

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...

CVE-2022-34331

CVE-2022-34331 affects IBM PowerVM Hypervisor (FW950 through FW1010) where a sequence of maintenance operations on SRIOV NICs can misconfigure the adapter and disable the intended VEPA configuration. The IBM/Power9+ PowerVM firmware updates listed as remediation are FW950.50 (950_105), FW1010.40 ...

CVE-2022-34331 IBM Power FW security bypass

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...