PT-2019-4269 · Intel+1 · Intel Ethernet 700 Series Controllers+1

Published 2019-05-04 · Updated 2023-02-24 · CVE-2019-0145

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Ethernet 700 Series Controllers versions prior to 7.0

Description The issue is related to a buffer overflow in the i40e driver, which may allow an authenticated user to potentially enable an escalation of privilege via local access. This could permit an attacker to elevate their privileges.

Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2019-2321

ALT-PU-2019-2339

ALT-PU-2019-2488

ALT-PU-2019-2746

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2020-2737

ALT-PU-2020-3454

ALT-PU-2021-1531

ALT-PU-2021-1840

BDU:2019-04876

CVE-2019-0145

Affected Products

Alt Linux

Intel Ethernet 700 Series Controllers

References · 15

• https://cve.org/CVERecord?id=CVE-2019-0145 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-0145 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0145 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-0145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-0145 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04876 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0145 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-0145 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.139 · Note
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.244 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0145 · Note
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.205 · Note
• https://lists.osuosl.org/pipermail/intel-wired-lan/Week-of-Mon-20200810/021006.html · Note
• https://lore.kernel.org/stable/[e-mail] · Note