Unauthorized Access

github.com/kubernetes-csi/external-provisioner, github.com/kubernetes-csi/external-snapshotter and github.com/kubernetes-csi/external-resizer allows unauthorized access to volume data. The VolumeSnapshotDataSource, ExpandCSIVolumes, and VolumePVCDataSource Kubernetes feature gates in kube-apiserv...

Intel Ethernet 700 Series Controllers Denial of Service Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. A denial of service vulnerability exists in Intel Ethernet 700 Series Controllers versions prior to 7.0. The vulnerability stems from insufficient input validation in the controller's i40e driver. An attacker could...

Intel Ethernet 700 Series Controllers Insufficient Access Control Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. An Insufficient Access Control vulnerability exists in Intel Ethernet 700 Series Controllers firmware prior to version 7.0. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2019-0143

Unhandled exception in Kernel-mode drivers for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0149

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0146

Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0147

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0145

Buffer overflow in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2019-0139

Insufficient access control in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access...

CVE-2019-0140

Buffer overflow in firmware for IntelR Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access...

Buffer overflow

Buffer overflow in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access...

Design/Logic Flaw

Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

Input validation

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0149

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0147

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0146

Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0148

Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

Input validation

Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

Design/Logic Flaw

Resource leak in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access...

Improper access control

Insufficient access control in ilp60x64.sys driver for IntelR Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access...