AWS, Other Cloud Services Affected by Flaws in Eltima SDK

Researchers have found a number of high-security vulnerabilities in a library created by network virtualization firm Eltima, that leave about a dozen cloud services used by millions of users worldwide open to privilege-escalation attacks. That includes Amazon WorkSpaces, Accops and NoMachine, amo...

The vulnerability of the implementation of the Ethernet Industrial Protocol (ENIP) in Cisco Firepower Threat Defense (FTD) software allows a attacker to circumvent security restrictions.

The vulnerability of the Ethernet Industrial Protocol ENIP implementation of Cisco Firepower Threat Defense FTD’s micro-programmed network interface controllers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restriction...

CVE-2021-43975

An out-of-bounds write flaw was found in the Linux kernel’s Aquantia AQtion Ethernet card Atlantic driver in the way the ethernet card provides malicious input to the driver. This flaw allows a local user to emulate the networking device and crash the system. The highest threat from this...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access. An uncontrolled resource consumption in some IntelR...

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists due to insufficient access control in some IntelR Ethernet E810 Adapter drivers for Linux which allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33098

Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-33098

Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-33098

Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access...

DEBIAN-CVE-2021-33098

Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-0197

Protection mechanism failure in the firmware for the IntelR Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to enable a denial of service via local access...

CVE-2021-0199

Improper input validation in the firmware for the IntelR Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0200

Out-of-bounds write in the firmware for IntelR Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0135

Improper input validation in the IntelR Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0198

Improper access control in the firmware for the IntelR Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0135

Improper input validation in the IntelR Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0199

Improper input validation in the firmware for the IntelR Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0200

Out-of-bounds write in the firmware for IntelR Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0135

Improper input validation in the IntelR Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the firmware for the IntelR Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-33098

Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access...