5.9

CVE-2016-8106

A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Ethernet Controller Xl710 Firmware Version <= 5.04
   Intel ≫ Eth Converged Ntwk Adptr X710-da2 Ex710da2g1p5 Version-
   Intel ≫ Eth Converged Ntwk Adptr X710-da4 Ex710da4fhg1p5 Version-
   Intel ≫ Eth Converged Ntwk Adptr X710-da4 Ex710da4g1p5 Version-
   Intel ≫ Eth Converged Ntwk Adptr Xl710-qda1 Exl710qda1g1p5 Version-
   Intel ≫ Eth Converged Ntwk Adptr Xl710-qda2 Exl710qda2g1p5 Version-
   Intel ≫ Ethernet Converged Network Adapter X710-da2 X710da2 Version-
   Intel ≫ Ethernet Converged Network Adapter X710-da2 X710da2blk Version-
   Intel ≫ Ethernet Converged Network Adapter X710-da2 X710da2g2p5 Version-
   Intel ≫ Ethernet Converged Network Adapter X710-da4 X710da4fh Version-
   Intel ≫ Ethernet Converged Network Adapter X710-da4 X710da4fhblk Version-
   Intel ≫ Ethernet Converged Network Adapter X710-da4 X710da4fhg2p5 Version-
   Intel ≫ Ethernet Converged Network Adapter X710-da4 X710da4g2p5 Version-
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1 Version-
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1blk Version-
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1g2p5 Version-
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2 Version-
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2blk Version-
   Intel ≫ Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2g2p5 Version-
Lenovo ≫ Converged Hx Series Version5.05
Lenovo ≫ Nextscale Nx360 M5 Version5.05
Lenovo ≫ System X3250 M5 Version5.05
Lenovo ≫ System X3500 M5 Version5.05
Lenovo ≫ System X3550 M5 Version5.05
Lenovo ≫ System X3650 M5 Version5.05
Lenovo ≫ System X3750 M4 Version5.05
Lenovo ≫ System X3850 X6 Version5.05
Lenovo ≫ System X3950 X6 Version5.05
Lenovo ≫ Thinkagile Cx2200 Version5.05
Lenovo ≫ Thinkagile Cx4200 Version5.05
Lenovo ≫ Thinkagile Cx4600 Version5.05
Lenovo ≫ Thinkserver Rd350 Version5.05
Lenovo ≫ Thinkserver Rd450 Version5.05
Lenovo ≫ Thinkserver Rd550 Version5.05
Lenovo ≫ Thinkserver Rd650 Version5.05
Lenovo ≫ Thinkserver Sd350 Version5.05
Lenovo ≫ Thinkserver Td350 Version5.05
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.58% 0.85
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/95333
Third Party Advisory
VDB Entry