CVE-2016-8106: Input Validation

Q: What is the severity of CVE-2016-8106?

CVE-2016-8106 is classified as a Denial of Service vulnerability which may have a significant impact on affected systems.

Q: How do I fix CVE-2016-8106?

To remediate CVE-2016-8106, update the Intel Ethernet Controller's firmware to version 5.05 or later.

Q: What products are affected by CVE-2016-8106?

CVE-2016-8106 affects Intel Ethernet Controllers X710 and XL710 with firmware versions prior to 5.05.

Q: Can CVE-2016-8106 be exploited remotely?

Yes, CVE-2016-8106 can be exploited remotely under specific network conditions.

Q: What impact does CVE-2016-8106 have on network traffic?

CVE-2016-8106 can prevent the affected Intel Ethernet Controller from processing network traffic, leading to service disruptions.

Published Jan 9, 2017

Updated

A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.

Affected Software

94 affected components

Intel Ethernet Controller X710 Firmware<=5.04

Intel Ethernet Controller X710-am2 Sr1zp

Intel Ethernet Controller X710-am2 Sr1zq

Intel Ethernet Controller X710-bm2 Sllkb

Intel Ethernet Controller X710-bm2 Sllkc

Intel Ethernet Controller Xl710-am1 Sr1zm

Intel Ethernet Controller Xl710-am1 Sr1zn

Intel Ethernet Controller Xl710-am2 Sr1zk

Intel Ethernet Controller Xl710-am2 Sr1zl

Intel Ethernet Controller Xl710-bm1 Sllk9

Intel Ethernet Controller Xl710-bm1 Sllka

Intel Ethernet Controller Xl710-bm2 Sllk7

Intel Ethernet Controller Xl710-bm2 Sllk8

Intel Ethernet Controller Xl710 Firmware<=5.04

Intel Eth Converged Ntwk Adptr X710-da2 Ex710da2g1p5

Intel Eth Converged Ntwk Adptr X710-da4 Ex710da4fhg1p5

Intel Eth Converged Ntwk Adptr X710-da4 Ex710da4g1p5

Intel Eth Converged Ntwk Adptr Xl710-qda1 Exl710qda1g1p5

Intel Eth Converged Ntwk Adptr Xl710-qda2 Exl710qda2g1p5

Intel Ethernet Converged Network Adapter X710-da2 X710da2

Intel Ethernet Converged Network Adapter X710-da2 X710da2blk

Intel Ethernet Converged Network Adapter X710-da2 X710da2g2p5

Intel Ethernet Converged Network Adapter X710-da4 X710da4fh

Intel Ethernet Converged Network Adapter X710-da4 X710da4fhblk

Intel Ethernet Converged Network Adapter X710-da4 X710da4fhg2p5

Intel Ethernet Converged Network Adapter X710-da4 X710da4g2p5

Intel Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1

Intel Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1blk

Intel Ethernet Converged Network Adapter Xl710-qda1 Xl710qda1g2p5

Intel Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2

Intel Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2blk

Intel Ethernet Converged Network Adapter Xl710-qda2 Xl710qda2g2p5

Intel Ethernet I\/o Module Xl710-qda1 Axx1p40frtiom

Intel Ethernet I\/o Module Xl710-qda2 Axx2p40frtiom

HP Ethernet 10gb 2-port 562flr-sfp\+

HP Ethernet 10gb 2-port 562sfp\+

HP Ethernet 10gb 4-port 563sfp\+

HP Proliant Xl260a G9 Server

Lenovo Converged Hx Series=5.05

Lenovo Converged Hx5500 Appliance=5.05

Lenovo Converged Hx5510 Appliance=5.05

Lenovo Converged Hx7500 Appliance=5.05

Lenovo Converged Hx7510 Appliance=5.05

Lenovo Nextscale Nx360 M5=5.05

Lenovo System X3250 M5=5.05

Lenovo System X3500 M5=5.05

Lenovo System X3550 M5=5.05

Lenovo System X3650 M5=5.05

Lenovo System X3750 M4=5.05

Lenovo System X3850 X6=5.05

Lenovo System X3950 X6=5.05

Lenovo Thinkagile Cx2200=5.05

Lenovo Thinkagile Cx4200=5.05

Lenovo Thinkagile Cx4600=5.05

Lenovo ThinkServer RD350=5.05

Lenovo Thinkserver Rd450=5.05

Lenovo Thinkserver Rd550=5.05

Lenovo Thinkserver Rd650=5.05

Lenovo Thinkserver Sd350=5.05

Lenovo Thinkserver Td350=5.05

All of the following

Intel Ethernet Controller X710 Firmware<=5.04

Any of the following