Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack

CVE-2024-36274
HIGH 7.1

At a glance

Source
NVD
EPSS
EPSS 0.37 % · percentile 31 ()
State
PUBLISHED
Published
Updated
Assigner
intel
NVD status
Deferred

Description

Out-of-bounds write in the Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Weaknesses (CWE)

References

Scores

VersionScoreVectorScored by
CVSS 4.0HIGH 7.1CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:Nintel
CVSS 3.1MEDIUM 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hintel
CVSS 4.0HIGH 7.1CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · secure@intel.com (Secondary)
CVSS 3.1MEDIUM 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · secure@intel.com (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Packaffected See references

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD