medium
5.9
CWE
20
Advisory Published
Updated

CVE-2016-8106: Input Validation

First published: Mon Jan 09 2017(Updated: )

A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.

Credit: secure@intel.com

Affected SoftwareAffected VersionHow to fix
Intel Ethernet Controller x710-AM2 SR1ZQ<=5.04
Intel Ethernet Controller x710-am2 firmware
Intel XL710-AM2 Controller
Intel Ethernet Controller x710-bm2
Intel Ethernet Controller x710-bm2
Intel Ethernet Controller xl710-am1 sr1zm
Intel Ethernet Controller XL710
Intel Ethernet Controller XL710
Intel Ethernet Controller XL710
Intel Ethernet Controller XL710-BM1
Intel Ethernet Controller XL710-BM1
Intel Ethernet Controller x710-bm2
Intel Ethernet Controller XL710-BM2
Intel Ethernet Controller XL710<=5.04
Intel Ethernet Converged Network Adapter X710-DA2
Intel Ethernet Converged Network Adapter X710-DA4
Intel Ethernet Converged Network Adapter X710-DA4
Intel Ethernet Converged Network Adapter XL710
Intel Ethernet Converged Network Adapter XL710-QDA2
Intel Ethernet Converged Network Adapter X710-DA2
Intel Ethernet Converged Network Adapter X710-DA2
Intel Ethernet Converged Network Adapter X710-DA2
Intel Ethernet Converged Network Adapter X710-DA4
Intel Ethernet Converged Network Adapter X710-DA4
Intel Ethernet Converged Network Adapter X710-DA4
Intel Ethernet Converged Network Adapter X710-DA4
Intel Ethernet I/O Module XL710-QDA1 AXx1P40FRtiom
Intel Ethernet I/O Module XL710-QDA1 AXx1P40FRtiom
Intel Ethernet I/O Module XL710-QDA1 AXx1P40FRtiom
Intel Ethernet Converged Network Adapter XL710-QDA2
Intel Ethernet Converged Network Adapter XL710-QDA2
Intel Ethernet Converged Network Adapter XL710-QDA2
Intel Ethernet I/O Module XL710-QDA1 AXx1P40FRtiom
Intel Ethernet I/O Module XL710-QDA2
HP Ethernet 10GB 2-Port 562FLR-SFP+
HP Ethernet 10Gb 2-Port 562SFP+
hp Ethernet 10gb 4-port 563sfp+
HP ProLiant XL260a Gen9 Server
Lenovo Converged HX Series=5.05
Lenovo Converged HX5500 Appliance=5.05
Lenovo Converged HX5510 Appliance=5.05
Lenovo Converged HX7500 Appliance=5.05
Lenovo Converged HX7510 Appliance=5.05
Lenovo NextScale NX360 M5=5.05
Lenovo System X3250 M5=5.05
Lenovo System X3500 M5=5.05
Lenovo System X3550 M5=5.05
Lenovo System x3650 M5=5.05
Lenovo System X3750 M4=5.05
Lenovo System X3850 X6=5.05
Lenovo System X3950 X6 Firmware=5.05
Lenovo ThinkAgile CX2200=5.05
Lenovo ThinkAgile CX4200=5.05
Lenovo ThinkAgile CX4600=5.05
Lenovo ThinkServer RD350=5.05
Lenovo ThinkServer RD450=5.05
Lenovo ThinkServer RD550=5.05
Lenovo ThinkServer RD650=5.05
Lenovo ThinkServer SD350=5.05
Lenovo ThinkServer TD350=5.05

Remedy

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05368378

Remedy

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00063&languageid=en-fr

Remedy

https://support.lenovo.com/us/en/product_security/LEN-12029

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2016-8106?

    CVE-2016-8106 is classified as a Denial of Service vulnerability which may have a significant impact on affected systems.

  • How do I fix CVE-2016-8106?

    To remediate CVE-2016-8106, update the Intel Ethernet Controller's firmware to version 5.05 or later.

  • What products are affected by CVE-2016-8106?

    CVE-2016-8106 affects Intel Ethernet Controllers X710 and XL710 with firmware versions prior to 5.05.

  • Can CVE-2016-8106 be exploited remotely?

    Yes, CVE-2016-8106 can be exploited remotely under specific network conditions.

  • What impact does CVE-2016-8106 have on network traffic?

    CVE-2016-8106 can prevent the affected Intel Ethernet Controller from processing network traffic, leading to service disruptions.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203