PT-2022-6458 · Intel · Intel 82599 Ethernet Controllers/Adapters

Asaf Modelevsky · Published 2022-02-09 · Updated 2023-03-03 · CVE-2021-33096

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) 82599 Ethernet Controllers and Adapters (affected versions not specified)

Description The issue is related to improper isolation of shared resources in the network on chip for the Intel(R) 82599 Ethernet Controllers and Adapters. This may allow an authenticated user to potentially enable denial of service via local access. The problem is also associated with incorrect clearing or release of resources, which can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-404

CWE-668

Related Identifiers

BDU:2023-01493

CVE-2021-33096

Affected Products

Intel 82599 Ethernet Controllers/Adapters

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2021-33096 · Security Note
• https://bdu.fstec.ru/vul/2023-01493 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00571.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-33096 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-33096 · Security Note
• https://ubuntu.com/security/CVE-2021-33096 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33096 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220210-0010 · Note
• https://cdrdv2.intel.com/v1/dl/getContent/655276 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33096 · Note
• https://t.me/cibsecurity/37139 · Telegram Post