PT-2021-12863 · Intel · Intel Ethernet Controllers 800 Series Linux Drivers

Published 2021-08-11 · Updated 2021-09-14 · CVE-2021-0003

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Intel(R) Ethernet Controllers 800 series Linux drivers versions prior to 1.4.11

Description: The issue is related to an improper conditions check in the Linux drivers for Intel(R) Ethernet Controllers 800 series. This may allow an authenticated user to potentially enable information disclosure via local access.

Recommendations: For versions prior to 1.4.11, update to version 1.4.11 or later to resolve the issue.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2021-0003

Affected Products

Intel Ethernet Controllers 800 Series Linux Drivers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-0003 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00515.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0003 · Vendor Advisory
• https://t.me/cvenotify/19093 · Telegram Post
• https://security.netapp.com/advisory/ntap-20210827-0008 · Note