Vulnerability Details CVE-2021-0004
Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.1%
CVSS Severity
CVSS v3 Score 4.4
CVSS v2 Score 2.1
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IVGBTAQ3N7X3RJRMPD3QZXD76V4HSOEP/
- https://security.netapp.com/advisory/ntap-20210827-0009/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00479.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IVGBTAQ3N7X3RJRMPD3QZXD76V4HSOEP/
- https://security.netapp.com/advisory/ntap-20210827-0009/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00479.html
Products affected by CVE-2021-0004
-
cpe:2.3:h:intel:ethernet_controller_e810:-
-
cpe:2.3:o:fedoraproject:fedora:34
-
cpe:2.3:o:intel:ethernet_controller_e810_firmware:-
-
cpe:2.3:o:intel:ethernet_controller_e810_firmware:1.3.19
-
cpe:2.3:o:intel:ethernet_controller_e810_firmware:1.4.11
-
cpe:2.3:o:intel:ethernet_controller_e810_firmware:1.5.1.0