HPESBHF04061 rev.1 - HPE Ethernet Adapters with Intel 700 Series Based Controllers, Local Escalation of Privileges and/or Denial of Service

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 4610C 10/25Gb Ethernet Adapter - Prior to v8.1 HPE Ethernet 10Gb 2-port FLR-SFP+ X710-DA2 Adapter - Prior to v7.3 HPE Ethernet 10Gb 2-port...

Intel® Ethernet 700 Series Controller Advisory

Summary: Potential security vulnerabilities in Intel® Ethernet 700 Series Controllers may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8693 Description: Improper buff...

PT-2020-4898

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers affected versions not specified Description: A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or...

PT-2020-4899

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers versions prior to 7.3 Description: The issue is related to insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers. This may allow a privileged user to potentially enabl...

PT-2020-4902

Name of the Vulnerable Software and Affected Versions: Intel Ethernet 700 Series Controllers affected versions not specified Description: The issue is caused by a buffer overflow in memory, which may allow an attacker to cause a denial of service or escalate their privileges. A privileged user ca...

PT-2020-4897

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers versions prior to 7.3 Description: The issue is related to a protection mechanism failure, which may allow a privileged user to potentially enable escalation of privilege and/or denial of service via loc...

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software arises from insufficient checks during Ethernet frame processing, allowing attackers to trigger service interruptions.

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software exists due to insufficient checks during the processing of Ethernet frames. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending malicious Ethernet frames through the...

Denial of Service Vulnerability in Honeywell DCS C300 Controller (CNVD-2020-67881)

The CC-PCNT02 is a controller for Honeywell DCS C300 systems that supports Ethernet communication. A denial of service vulnerability exists in the Honeywell DCS C300 controller that can be exploited by an attacker to cause a denial of service...

Denial of Service Vulnerability in Honeywell DCS C300 Controller (CNVD-2020-67879)

The CC-PCNT02 is a controller for Honeywell DCS C300 systems that supports Ethernet communication. A denial of service vulnerability exists in the Honeywell DCS C300 controller that can be exploited by an attacker to cause a denial of service...

Denial of Service Vulnerability in Honeywell DCS C300 Controller (CNVD-2020-67880)

The CC-PCNT02 is a controller for Honeywell DCS C300 systems that supports Ethernet communication. A denial of service vulnerability exists in the Honeywell DCS C300 controller that can be exploited by an attacker to cause a denial of service...

Denial of Service Vulnerability in Honeywell DCS C300 Controller

The CC-PCNT02 is a controller for Honeywell DCS C300 systems that supports Ethernet communication. The Honeywell DCS C300 controller denial of service vulnerability can be exploited by an attacker to cause a denial of service...

DEBIAN-CVE-2020-27617

ethgetgsotype in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol...

[SECURITY] Fedora 31 Update: arpwatch-2.1a15-48.fc31

The arpwatch package contains arpwatch and arpsnmp. Arpwatch and arpsnmp are both network monitoring tools. Both utilities monitor Ethernet or FDDI network traffic and build databases of Ethernet/IP address pairs, and can report certain changes via email. Install the arpwatch package if you need...

[SECURITY] Fedora 32 Update: arpwatch-2.1a15-48.fc32

The arpwatch package contains arpwatch and arpsnmp. Arpwatch and arpsnmp are both network monitoring tools. Both utilities monitor Ethernet or FDDI network traffic and build databases of Ethernet/IP address pairs, and can report certain changes via email. Install the arpwatch package if you need...

[SECURITY] Fedora 33 Update: arpwatch-2.1a15-48.fc33

The arpwatch package contains arpwatch and arpsnmp. Arpwatch and arpsnmp are both network monitoring tools. Both utilities monitor Ethernet or FDDI network traffic and build databases of Ethernet/IP address pairs, and can report certain changes via email. Install the arpwatch package if you need...

Fedora: Security Advisory for arpwatch (FEDORA-2020-8e115f0c7a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-5657

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Modul...

CVE-2020-5652

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...

CVE-2020-5652

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...

CVE-2020-5655

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...