CVE-2019-0145: Buffer Overflow
Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-0145?
CVE-2019-0145 is a vulnerability in the i40e driver for Intel Ethernet 700 Series Controllers, allowing an authenticated user to potentially enable an escalation of privilege via local access.
What is the severity of CVE-2019-0145?
CVE-2019-0145 has a severity rating of 7.8 (high).
Which software versions are affected by CVE-2019-0145?
CVE-2019-0145 affects Intel(R) Ethernet Controller X710-tm4 Firmware versions up to 7.0, Intel(R) Ethernet Controller X710-at2 Firmware versions up to 7.0, and Intel(R) Ethernet Controller Xxv710-am2 Firmware versions up to 7.0.
How can an attacker exploit CVE-2019-0145?
An attacker can exploit CVE-2019-0145 by using a buffer overflow in the i40e driver to potentially enable an escalation of privilege.
Where can I find more information about CVE-2019-0145?
You can find more information about CVE-2019-0145 in the advisory published by Intel: [Intel-SA-00255](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html).