5.9

CVE-2016-8106

A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Ethernet Controller Xl710 Firmware Version <= 5.04
   Intel ≫ Eth Converged Ntwk Adptr X710-da2 Ex710da2g1p5 Version -
   Intel ≫ Eth Converged Ntwk Adptr X710-da4 Ex710da4fhg1p5 Version -
   Intel ≫ Eth Converged Ntwk Adptr X710-da4 Ex710da4g1p5 Version -
   Intel ≫ Eth Converged Ntwk Adptr Xl710-qda1 Exl710qda1g1p5 Version -
   Intel ≫ Eth Converged Ntwk Adptr Xl710-qda2 Exl710qda2g1p5 Version -
   Intel ≫ Ethernet Converged Network Adapter X710-da2 X710da2 Version -
   Intel ≫ Ethernet Converged Network Adapter X710-da2 X710da2blk Version -
   Intel ≫ Ethernet Converged Network Adapter X710-da2 X710da2g2p5 Version -
   Intel ≫ Ethernet Converged Network Adapter X710-da4 X710da4fh Version -
   Intel ≫ Ethernet Converged Network Adapter X710-da4 X710da4fhblk Version -
   Intel ≫ Ethernet Converged Network Adapter X710-da4 X710da4fhg2p5 Version -
   Intel ≫ Ethernet Converged Network Adapter X710-da4 X710da4g2p5 Version -
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1 Version -
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1blk Version -
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1g2p5 Version -
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2 Version -
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2blk Version -
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2g2p5 Version -
Lenovo ≫ Converged Hx Series Version 5.05
Lenovo ≫ Nextscale Nx360 M5 Version 5.05
Lenovo ≫ System X3250 M5 Version 5.05
Lenovo ≫ System X3500 M5 Version 5.05
Lenovo ≫ System X3550 M5 Version 5.05
Lenovo ≫ System X3650 M5 Version 5.05
Lenovo ≫ System X3750 M4 Version 5.05
Lenovo ≫ System X3850 X6 Version 5.05
Lenovo ≫ System X3950 X6 Version 5.05
Lenovo ≫ Thinkagile Cx2200 Version 5.05
Lenovo ≫ Thinkagile Cx4200 Version 5.05
Lenovo ≫ Thinkagile Cx4600 Version 5.05
Lenovo ≫ Thinkserver Rd350 Version 5.05
Lenovo ≫ Thinkserver Rd450 Version 5.05
Lenovo ≫ Thinkserver Rd550 Version 5.05
Lenovo ≫ Thinkserver Rd650 Version 5.05
Lenovo ≫ Thinkserver Sd350 Version 5.05
Lenovo ≫ Thinkserver Td350 Version 5.05
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.13% 0.913
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www-01.ibm.com/support/docview.wss?uid=swg22002507
http://www.securityfocus.com/bid/95333
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037562
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05368378
Patch
Third Party Advisory
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00063&languageid=en-fr
Patch
Vendor Advisory
https://security.netapp.com/advisory/ntap-20190731-0001/
https://support.lenovo.com/us/en/product_security/LEN-12029
Patch
Third Party Advisory