Improper access control

Improper access control in the firmware for the IntelR Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-33098

Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access...

Input validation

Improper input validation in the firmware for the IntelR Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0135

Improper input validation in the IntelR Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0135

Intel Ethernet Diagnostic Driver for Windows before version 1.4.0.10 is impacted by an input validation vulnerability that could allow a privileged user to escalate privileges via local access. The issue is described as improper input validation and affects the Intel Ethernet Diagnostic Driver fo...

CVE-2021-0199

Intel Ethernet Network Controller E810 firmware prior to 1.6.0.6 contains an input-validation flaw that may allow a local privileged user to cause a denial of service. This CVE (CVE-2021-0199) is discussed across multiple sources (including Red Hat, IBM Bulletins, and Intel advisories) with consi...

CVE-2021-0198

CVE-2021-0198 affects Intel Ethernet Network Controller E810 firmware prior to version 1.5.5.6. The root cause is improper access control in the firmware, which could allow a local authenticated attacker to cause a denial of service. Public documents from Red Hat, IBM (Cloud Pak System/QRadar), a...

CVE-2021-0198

Improper access control in the firmware for the IntelR Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0200

Out-of-bounds write in the firmware for IntelR Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0200

CVE-2021-0200 describes an out-of-bounds write in the firmware of Intel(R) Ethernet 700 Series Controllers prior to version 8.2, which could allow a locally authenticated user to escalate privileges. The vulnerability is tied to firmware logic in Intel Ethernet controllers (700 Series) and requir...

CVE-2021-33098

CVE-2021-33098: Affects the Intel Ethernet ixgbe driver for Linux; the driver’s improper input validation in versions before 3.17.3 can allow an authenticated local user to trigger denial of service. Root cause is input validation weakness in the ixgbe driver; exploit requires local access. Remed...

CVE-2021-33098

Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-33098

Improper input validation in the IntelR Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access...

NetworkManager security, bug fix, and enhancement update

1.32.10-4.0.1 - add connectivity check via Oracle servers Orabug: 32051972 - Disable the build of NetworkManager-config-connectivity- subpackage for 8.3 1:1.32.10-4 - revert unapproved patches part of 'cloud-setup' change rh 1977984 1:1.32.10-3 - preserve the IPv6 multicast route added by kernel ...

Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass (cisco-sa-ftd-enip-bypass-eFsxd8KP)

According to its self-reported version, Cisco FTD Software is affected by multiple policy bypass vulnerabilities in its payload inspection component for Ethernet Industrial Protocol ENIP traffic due to incomplete deep packet inspection for ENIP traffic. An unauthenticated, remote attacker can...

RHEL 8 : kernel-rt (RHSA-2021:4140)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4140 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CentOS 8 : kernel-rt (CESA-2021:4140)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4140 advisory. - kernel: Intel graphics card information leak. CVE-2019-14615 - kernel: out-of-bounds reads in pinctrl subsystem. CVE-2020-0427 - kernel: Improper inp...

Intel Ethernet Controllers 安全漏洞

Intel Ethernet Controllers is an Ethernet controller from Intel Corporation. A security vulnerability in Intel Ethernet Controllers, which stems from improper access control in IntelR Ethernet firmware prior to version 1.5.5.6 of the Network Controller E810, may allow privileged users to...

Intel Ethernet Controllers 缓冲区错误漏洞

Intel Ethernet Controllers is an Ethernet controller from IntelR Corporation. A buffer error vulnerability exists in Intel Ethernet controllers that stems from out-of-bounds writes in IntelR Ethernet 700 firmware for series controllers prior to version 8.2 may allow a privileged user to potential...

Intel Ethernet Adapters 800 输入验证错误漏洞

Intel Ethernet Adapters 800 is an Ethernet adapter from IntelR Corporation. The Intel Ethernet Adapters 800 suffers from an input validation error vulnerability that stems from incorrect input validation in the IntelR Management Tool prior to version 1.4.0.15 of the IntelR Network Adapters for...