cbcvebase.
CVE-2019-0145
published 2019-11-14

CVE-2019-0145: Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.2.6-1 (bookworm)linux 5.2.6-1 (bookworm)
intelethernet_700_series_software< 24.024.0
intelethernet_controller_710-bm1_firmware< 7.07.0
intelethernet_controller_x710-at2_firmware< 7.07.0
intelethernet_controller_x710-bm2_firmware< 7.07.0
intelethernet_controller_x710-tm4_firmware< 7.07.0
intelethernet_controller_xxv710-am1_firmware< 7.07.0
intelethernet_controller_xxv710-am2_firmware< 7.07.0
linuxlinux_kernel>= 0 < 5.2.6-15.2.6-1
linuxlinux_kernel>= 0 < 5.2.6-15.2.6-1
linuxlinux_kernel>= 0 < 5.2.6-15.2.6-1
linuxlinux_kernel>= 0 < 5.2.6-15.2.6-1
linuxlinux_kernel>= 4.10 < 4.14.2054.14.205
linuxlinux_kernel>= 4.15 < 4.19.1394.19.139
linuxlinux_kernel>= 4.20 < 5.25.2
linuxlinux_kernel>= 4.6 < 4.9.2444.9.244
paloaltopan-os

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH