8.6

CVE-2015-1142857

EPSS 0.69%
Published 23.01.2018 14:29:00
Last modified 21.11.2024 02:24:27
Source cve@mitre.org
Teams watchlist Login
Open Login

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.

Affected products Warnungen 0 Metrics 3 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ X710 Firmware Version-

Intel ≫ X710 Version-

Intel ≫ 82599 Firmware Version-

Intel ≫ 82599 Version-

Intel ≫ X540 Firmware Version-

Intel ≫ X540 Version-

Intel ≫ I350 Firmware Version-

Intel ≫ I350 Version-

Intel ≫ 82576 Firmware Version-

Intel ≫ 82576 Version-

Linux ≫ Linux Kernel Ixgbe Version-

Linux ≫ Linux Kernel I40e/i40evf Version-

Dpdk ≫ Dpdk Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.69%	0.694

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.6	3.9	4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

http://seclists.org/oss-sec/2015/q4/425

Patch

Third Party Advisory

Mailing List

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00046&languageid=en-fr

Vendor Advisory

Mitigation

https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-smolyar.pdf

Third Party Advisory

Technical Description

https://nvd.nist.gov/vuln/detail/CVE-2015-1142857

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-1142857

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-1142857

EUVD