PT-2020-7366 · Intel · Intel E1000E+1

Published 2020-02-13 · Updated 2020-02-27 · CVE-2013-1634

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Intel e1000e/82574L network controller devices through 2013-02-06

Description: A denial of service issue exists where the device can be brought into a non-processing state when parsing 32 hex, 33 hex, or 34 hex byte values at the 0x47f offset. The root cause of this issue was an incorrectly configured EEPROM image.

Recommendations: For Intel e1000e/82574L network controller devices, consider avoiding the use of 32 hex, 33 hex, or 34 hex byte values at the 0x47f offset until a proper configuration of the EEPROM image is ensured. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2013-1634

Affected Products

Intel 82574L

Intel E1000E

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2013-1634 · Security Note
• http://web.archive.org/web/20131205055429/https://communities.intel.com/community/wired/blog/2013/02/07/intel-82574l-gigabit-ethernet-controller-statement · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85069 · Note
• http://securitytracker.com/id/1028089 · Note
• https://t.me/cvenotify/1024 · Telegram Post
• http://openwall.com/lists/oss-security/2013/02/12/3 · Note
• http://blog.krisk.org/2013/02/packets-of-death.html · Note
• http://openwall.com/lists/oss-security/2013/02/12/4 · Note