PT-2021-2096 · Intel+3 · Intel Ethernet E810 Adapter Drivers+3

Published 2021-02-09 · Updated 2021-11-09 · CVE-2020-24502

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Intel(R) Ethernet E810 Adapter drivers for Linux versions prior to 1.0.4 Intel(R) Ethernet E810 Adapter drivers for Windows versions prior to 1.4.29.0

Description: The issue is related to improper input validation in some Intel(R) Ethernet E810 Adapter drivers, which may allow an authenticated user to potentially enable a denial of service via local access. This could be exploited by an attacker to cause a disruption in service.

Recommendations: For Linux versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. For Windows versions prior to 1.4.29.0, update to version 1.4.29.0 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2021:4356

BDU:2021-00948

CESA-2021_4140

CESA-2021_4356

CVE-2020-24502

RHSA-2021:4140

RHSA-2021:4356

RHSA-2021_4140

RHSA-2021_4356

Affected Products

Almalinux

Centos

Intel Ethernet E810 Adapter Drivers

Red Hat

References · 57

• https://linux.oracle.com/errata/ELSA-2022-9365.html · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-24502 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-24502 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24502 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-24502 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-24502 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:4356 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-4356.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00948 · Security Note
• https://linux.oracle.com/errata/ELSA-2022-9368.html · Vendor Advisory
• https://vulners.com/cve/CVE-2020-24588 · Note
• https://vulners.com/cve/CVE-2020-24502 · Note
• https://vulners.com/cve/CVE-2021-31440 · Note
• https://vulners.com/cve/CVE-2020-29660 · Note