K85738358: Intel Ethernet Controller vulnerabilities CVE-2020-24497, CVE-2020-24498, CVE-2020-24500, CVE-2020-24501, and CVE-2020-24505

Security Advisory Description CVE-2020-24497 Insufficient Access Control in the firmware for IntelR E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access. CVE-2020-24498 Buffer overflow in the firmware for IntelR E81...

CVE-2020-24498

CVE-2020-24498 affects Intel® E810 Ethernet Controllers with firmware older than 1.4.1.13. The issue is a buffer overflow that could allow a privileged user to trigger a local DoS. Intel’s advisory and Red Hat/ENISA/HP/F5-context documents corroborate the vulnerability and tie mitigation to updat...