VulnerabilityModified
CVE-2019-0145
Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.
HIGH 7.8EPSS 0.33%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.33%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.33% probability · 26th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- intel/ethernet controller x710-tm4 firmware · intel/ethernet controller x710-at2 firmware · intel/ethernet controller xxv710-am2 firmware · intel/ethernet controller xxv710-am1 firmware · intel/ethernet controller x710-bm2 firmware · intel/ethernet controller 710-bm1 firmware · intel/ethernet 700 series software · linux/linux kernel
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.