Files
vuln-nvd/data/2019/CVE-2019-0145.json

2 lines
6.1 KiB
JSON
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"product":"2019.2 IPU – Intel(R) Ethernet 700 Series Controllers","vendor":"n/a","versions":[{"status":"affected","version":"See provided reference"}]}],"source":"secure@intel.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:intel:ethernet_controller_x710-tm4_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"26B90A01-0B80-4DB6-90A7-1791DA120901","versionEndExcluding":"7.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:intel:ethernet_controller_x710-tm4:-:*:*:*:*:*:*:*","matchCriteriaId":"41EEFF5E-3C88-43B3-9894-1B0C73DBA06A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:intel:ethernet_controller_x710-at2_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"42313648-4318-441E-B1B9-099A4D49FFDF","versionEndExcluding":"7.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:intel:ethernet_controller_x710-at2:-:*:*:*:*:*:*:*","matchCriteriaId":"8225E56D-74F1-43FC-8696-2F326A264704","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:intel:ethernet_controller_xxv710-am2_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F129E674-BCF6-480A-BBB3-44563A6B31B3","versionEndExcluding":"7.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:intel:ethernet_controller_xxv710-am2:-:*:*:*:*:*:*:*","matchCriteriaId":"5C6D2A9E-EE3D-4DEC-948E-58416CD32477","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:intel:ethernet_controller_xxv710-am1_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"CCA908C6-B34A-4056-9204-39FF4FC53866","versionEndExcluding":"7.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:intel:ethernet_controller_xxv710-am1:-:*:*:*:*:*:*:*","matchCriteriaId":"DA1817F4-978B-4F88-831F-C6259CE20E83","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:intel:ethernet_controller_x710-bm2_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8A2B04C6-5D1A-4D41-AB7A-3263ED8B015B","versionEndExcluding":"7.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:intel:ethernet_controller_x710-bm2:-:*:*:*:*:*:*:*","matchCriteriaId":"91940C69-80BB-43F8-81B5-92AAFCF59CE1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:intel:ethernet_controller_710-bm1_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2D2B96E9-DD07-449B-A309-B3B0B4574369","versionEndExcluding":"7.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:intel:ethernet_controller_710-bm1:-:*:*:*:*:*:*:*","matchCriteriaId":"EE34AA9F-CBD1-423B-A457-5FB79081540F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:intel:ethernet_700_series_software:*:*:*:*:*:*:*:*","matchCriteriaId":"BBE4DA9C-61F5-48CF-A995-CD6F48CD4E6B","versionEndExcluding":"24.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"80457255-00DD-4173-94E4-9D05C2F2E836","versionEndExcluding":"4.9.244","versionStartIncluding":"4.6","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"6155F485-86C4-4EF6-86BD-8C9CF5F50BDD","versionEndExcluding":"4.14.205","versionStartIncluding":"4.10","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"B5EB66B3-7CC6-4EE4-9F1B-DFD10E7773EF","versionEndExcluding":"4.19.139","versionStartIncluding":"4.15","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"9ECB3CBC-52A5-4B2C-AFFA-13E37D77461A","versionEndExcluding":"5.2","versionStartIncluding":"4.20","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access."},{"lang":"es","value":"Un desbordamiento del búfer en el controlador i40e para Intel® Ethernet 700 Series Controllers versiones anteriores a la versión 7.0 puede habilitar a un usuario autenticado para permitir potencialmente una escalada de privilegios por medio de un acceso local."}],"id":"CVE-2019-0145","lastModified":"2026-06-17T02:07:47.300","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-11-14T19:15:12.207","references":[{"source":"secure@intel.com","tags":["Patch","Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html"}],"sourceIdentifier":"secure@intel.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-120"}],"source":"nvd@nist.gov","type":"Primary"}]}