PT-2022-4045 · Intel+5 · Intel 82599 Ethernet Controllers/Adapters+5

Asaf Modelevsky · Published 2022-02-09 · Updated 2023-08-08 · CVE-2021-33061

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) 82599 Ethernet Controllers and Adapters (affected versions not specified)

Description The issue is related to insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters, which may allow an authenticated user to potentially enable denial of service via local access. This could be due to incorrect clearing or release of resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2022-04879

CVE-2021-33061

OESA-2022-1660

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2078-1

OPENSUSE-SU-2022_2079-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

SUSE-SU-2022:2077-1

SUSE-SU-2022:2078-1

SUSE-SU-2022:2079-1

SUSE-SU-2022:2080-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022:2116-1

SUSE-SU-2022:2177-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2022:2629-1

USN-5577-1

USN-5589-1

USN-5592-1

USN-5594-1

USN-5595-1

USN-5596-1

USN-5599-1

USN-5600-1

USN-5602-1

USN-5603-1

USN-5605-1

USN-5616-1

USN-5623-1

Affected Products

Astra Linux

Debian

Intel 82599 Ethernet Controllers/Adapters

Linuxmint

Suse

Ubuntu

References · 544

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/Ruia-ruia/CVE-2022-29582-Exploit · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-1972-infoleak-PoC · Exploit
• 🔥 https://github.com/Pwnzer0tt1/CVE-2022-36946 · Exploit
• 🔥 https://github.com/PenteraIO/CVE-2022-23222-POC · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2022-1011 · Exploit
• 🔥 https://github.com/ASkyeye/CVE-2022-1966 · Exploit
• 🔥❌ https://github.com/trhacknon/CVE-2022-34918-LPE-PoC · Exploit, Deleted
• 🔥❌ https://github.com/Sechack06/CVE-2022-34918 · Exploit, Deleted