Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2020-24502
HistoryFeb 17, 2021 - 12:00 a.m.

CVE-2020-24502

2021-02-1700:00:00
ubuntu.com
ubuntu.com
17
cve-2020-24502
intel ethernet e810
input validation
denial of service
linux
windows

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.6%

JSON

Improper input validation in some Intel® Ethernet E810 Adapter drivers
for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*,
may allow an authenticated user to potentially enable a denial of service
via local access.

Notes

Author Note
sbeattie these are Intel’s out-of-tree drivers.

Related

prion 1
cvelist 1
nvd 1
veracode 1
redhatcve 1
cve 1
intel 1
f5 1
oraclelinux 3
nessus 10
osv 1
almalinux 1
redhat 4
prion
prion
Input validation
2021-02-17 14:15:00
cvelist
cvelist
CVE-2020-24502
2021-02-17 13:38:03
nvd
nvd
CVE-2020-24502
2021-02-17 14:15:18
veracode
veracode
Denial Of Service (DoS)
2021-11-17 22:36:29
redhatcve
redhatcve
CVE-2020-24502
2021-02-18 19:13:33
cve
cve
CVE-2020-24502
2021-02-17 14:15:18
intel
intel
Intel® Ethernet E810 Adapter Driver Advisory
2021-02-09 00:00:00
f5
f5
K24920320 : Intel Ethernet Adapter Driver vulnerabilities CVE-2020-24502, CVE-2020-24503 and CVE-2020-24504
2021-03-01 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2022-05-10 00:00:00
Unbreakable Enterprise kernel-container security update
2022-05-10 00:00:00
kernel security, bug fix, and enhancement update
2021-11-16 00:00:00
nessus
nessus
Oracle Linux 8 : Unbreakable Enterprise kernel (ELSA-2022-9365)
2022-05-10 00:00:00
Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9368)
2022-05-10 00:00:00
RHEL 8 : kernel-rt (RHSA-2021:4140)
2021-11-11 00:00:00
osv
osv
Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
almalinux
almalinux
Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
redhat
redhat
(RHSA-2021:4140) Moderate: kernel-rt security and bug fix update
2021-11-09 08:21:02
(RHSA-2021:4356) Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
(RHSA-2021:4627) Moderate: Openshift Logging 5.3.0 bug fix and security update
2021-11-15 12:52:28

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.6%

JSON
Related for UB:CVE-2020-24502
prion1cvelist1nvd1veracode1redhatcve1cve1intel1f51oraclelinux3nessus10osv1almalinux1redhat4