CVE-2021-23168
published 2022-08-18CVE-2021-23168: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of…
PriorityP422medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.35%
26.8th percentile
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firmware-nonfree | < firmware-nonfree 20220913-1 (bookworm) | firmware-nonfree 20220913-1 (bookworm) |
| intel | dual_band_wireless-ac_3165_firmware | < 22.120 | 22.120 |
| intel | dual_band_wireless-ac_3168_firmware | < 22.120 | 22.120 |
| intel | dual_band_wireless-ac_8260_firmware | < 22.120 | 22.120 |
| intel | dual_band_wireless-ac_8265_firmware | < 22.120 | 22.120 |
| intel | killer_ac_1550_firmware | < 3.1122.1105 | 3.1122.1105 |
| intel | killer_wi-fi_6_ax1650_firmware | < 3.1122.1105 | 3.1122.1105 |
| intel | killer_wi-fi_6e_ax1675_firmware | < 3.1122.1105 | 3.1122.1105 |
| intel | killer_wi-fi_6e_ax1690_firmware | < 3.1122.1105 | 3.1122.1105 |
| intel | proset_wi-fi_6e_ax210_firmware | < 22.120 | 22.120 |
| intel | wi-fi_6_ax200_firmware | < 22.120 | 22.120 |
| intel | wi-fi_6_ax201_firmware | < 22.120 | 22.120 |
| intel | wi-fi_6e_ax211_firmware | < 22.120 | 22.120 |
| intel | wi-fi_6e_ax411_firmware | < 22.120 | 22.120 |
| intel | wireless-ac_9260_firmware | < 22.120 | 22.120 |
| intel | wireless-ac_9461_firmware | < 22.120 | 22.120 |
| intel | wireless-ac_9462_firmware | < 22.120 | 22.120 |
| intel | wireless-ac_9560_firmware | < 22.120 | 22.120 |
| intel | wireless_7265_firmware | < 22.120 | 22.120 |
| intel_proset | wireless_wifi_and_killer_wifi_products | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2qgc-gr4q-7mjq: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial
ghsa_unreviewed·2022-08-19
CVE-2021-23168 [MEDIUM] CWE-125 GHSA-2qgc-gr4q-7mjq: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
OSV
CVE-2021-23168: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial
osv·2022-08-18·CVSS 6.5
CVE-2021-23168 [MEDIUM] CVE-2021-23168: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Debian
CVE-2021-23168: firmware-nonfree - Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi pr...
vendor_debian·2021·CVSS 6.5
CVE-2021-23168 [MEDIUM] CVE-2021-23168: firmware-nonfree - Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi pr...
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Scope: local
bookworm: resolved (fixed in 20220913-1)
bullseye: open
forky: resolved (fixed in 20220913-1)
sid: resolved (fixed in 20220913-1)
trixie: resolved (fixed in 20220913-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://lists.debian.org/debian-lts-announce/2023/04/msg00002.htmlhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.htmlhttps://lists.debian.org/debian-lts-announce/2023/04/msg00002.htmlhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
2022-08-18
Published