PT-2021-2097 · Intel+5 · Intel Ethernet E810 Adapter Drivers For Linux+5

Published 2021-02-08 · Updated 2022-05-07 · CVE-2020-24504

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Intel Ethernet E810 Adapter drivers for Linux versions prior to 1.0.4

Description: The issue is related to uncontrolled resource consumption in some Intel Ethernet E810 Adapter drivers for Linux. This could potentially allow an authenticated user to enable a denial of service via local access.

Recommendations: For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2021:4356

BDU:2021-00949

CESA-2021_4140

CESA-2021_4356

CVE-2020-24504

OPENSUSE-SU-2022:0056-1

OPENSUSE-SU-2022:0131-1

OPENSUSE-SU-2022_0056-1

OPENSUSE-SU-2022_0131-1

RHSA-2021:4140

RHSA-2021:4356

RHSA-2021_4140

RHSA-2021_4356

SUSE-SU-2022:0056-1

SUSE-SU-2022:0079-1

SUSE-SU-2022:0131-1

SUSE-SU-2022_0056-1

SUSE-SU-2022_0079-1

SUSE-SU-2022_0131-1

Affected Products

Almalinux

Centos

Debian

Intel Ethernet E810 Adapter Drivers For Linux

Red Hat

Suse

References · 164

• https://security-tracker.debian.org/tracker/CVE-2020-24504 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-24504 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-24504 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0131-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0131-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0056-1 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24504 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-24504 · Security Note
• https://osv.dev/vulnerability/ALSA-2021:4356 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0056-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9368.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9365.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0079-1 · Vendor Advisory