CVE-2022-36382

published 2023-02-16

CVE-2022-36382: Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700…

medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C N I N A H

Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some Intel(R) Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
intel	ethernet_controller_x710-am2_firmware	< 9.101	9.101
intel	ethernet_controller_x710-bm2_firmware	< 9.101	9.101
intel	ethernet_controller_xl710-am1_firmware	< 9.101	9.101
intel	ethernet_controller_xl710-am2_firmware	< 9.101	9.101
intel	ethernet_controller_xl710-bm1_firmware	< 9.101	9.101
intel	ethernet_controller_xl710-bm2_firmware	< 9.101	9.101
intel	ethernet_controller_xxv710-am1_firmware	< 9.101	9.101
intel	ethernet_controller_xxv710-am2_firmware	< 9.101	9.101
intel	ethernet_converged_network_adapter_x710-da2_firmware	< 9.101	9.101
intel	ethernet_converged_network_adapter_x710-da4_firmware	< 9.101	9.101
intel	ethernet_converged_network_adapter_xl710-da1_firmware	< 9.101	9.101
intel	ethernet_converged_network_adapter_xl710-da2_firmware	< 9.101	9.101
intel	ethernet_network_controller_e810-cam1_firmware	< 1.7.0.8	1.7.0.8
intel	ethernet_network_controller_e810-cam2_firmware	< 1.7.0.8	1.7.0.8
intel	ethernet_network_controller_e810-xxvam2_firmware	< 1.7.0.8	1.7.0.8

CWE-787