High WID-SEC-2024-1829 10 CVEs

Intel Ethernet Controller: Mehrere Schwachstellen ermöglichen Privilegieneskalation und Denial of Service

Published Aug 13, 2024 · Updated Aug 15, 2024 · Revision 3 · de-DE

Vendor: Dell Vendor: Intel Vendor: Lenovo Product: Computer Product: Computer Product: Ethernet Controller Product: PowerEdge Platform: Windows

Summary

Ein lokaler oder entfernter anonymer Angreifer kann mehrere Schwachstellen in Intel Ethernet Controller ausnutzen, um seine Privilegien zu erhöhen und einen Denial-of-Service-Zustand zu erzeugen.

Product

Intel Ethernet Controller bezeichnet Netzwerkkarten (NIC) des Herstellers Intel.

Vulnerabilities 10

High 8.8

CVE-2024-21807

Improper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters bef…

Aug 14, 2024
High 8.8

CVE-2024-21810

Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters b…

Aug 14, 2024
High 8.8

CVE-2024-23497

Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before vers…

Aug 14, 2024
High 8.8

CVE-2024-23981

Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before versio…

Aug 14, 2024
High 8.8

CVE-2024-24986

Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before …

Aug 14, 2024
Medium 6.7

CVE-2024-21769

Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user …

Aug 14, 2024
Medium 6.7

CVE-2024-22376

Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version…

Aug 14, 2024
Medium 6.5

CVE-2024-23499

Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E8…

Aug 14, 2024
Medium 6.5

CVE-2024-24983

Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before…

Aug 14, 2024
Medium 5.5

CVE-2024-21806

Improper conditions check in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 …

Aug 14, 2024

Revision history

2024-08-15 #3
Neue Updates von LENOVO aufgenommen
2024-08-14 #2
Korrektur
2024-08-13 #1
Initiale Fassung

References

Intel Security Advisory INTEL-SA-00918 vom 2024-08-13
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
Intel Security Advisory INTEL-SA-01106 vom 2024-08-13
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01106.html
Dell Security Advisory DSA-2024-241 vom 2024-08-13
https://www.dell.com/support/kbdoc/de-de/000225473/dsa-2024-241.html
Lenovo Security Advisory LEN-163493 vom 2024-08-14
https://support.lenovo.com/us/en/product_security/LEN-163493
Dell Security Advisory vom 2024-08-13
https://www.dell.com/support/kbdoc/de-de/000227763/dsa-2024-359-dell-poweredge-server-security-update-for-intel-ethernet-controllers-adapters-and-tdx-software-vulnerabilities
Lenovo Security Advisory LEN-158927 vom 2024-08-15
https://support.lenovo.com/us/en/product_security/LEN-158927