8.6

CVE-2015-1142857

EPSS 2.11%
Veröffentlicht 23.01.2018 14:29:00
Zuletzt bearbeitet 21.11.2024 02:24:27
Erkennungen
Login

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 6

NVD 8 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Intel ≫ X710 Firmware Version -

Intel ≫ X710 Version -

Intel ≫ 82599 Firmware Version -

Intel ≫ 82599 Version -

Intel ≫ X540 Firmware Version -

Intel ≫ X540 Version -

Intel ≫ I350 Firmware Version -

Intel ≫ I350 Version -

Intel ≫ 82576 Firmware Version -

Intel ≫ 82576 Version -

Linux ≫ Linux Kernel Ixgbe Version -

Linux ≫ Linux Kernel I40e/i40evf Version -

Dpdk ≫ Dpdk Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.11%	0.8

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.6	3.9	4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://seclists.org/oss-sec/2015/q4/425

Patch

Third Party Advisory

Mailing List

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00046&languageid=en-fr

Vendor Advisory

Mitigation

https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-smolyar.pdf

Third Party Advisory

Technical Description

https://nvd.nist.gov/vuln/detail/CVE-2015-1142857

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-1142857

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-1142857

EUVD