CVE-2020-24498: Buffer Overflow
Published Feb 17, 2021
·Updated
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access.
Affected Software
10 affected components
Intel Ethernet Network Adapter E810 Firmware<1.4.1.13
Intel Ethernet Network Adapter E810-cqda1
Intel Ethernet Network Adapter E810-cqda1 For Ocp
Intel Ethernet Network Adapter E810-cqda1 For Ocp 3.0
Intel Ethernet Network Adapter E810-cqda2
Intel Ethernet Network Adapter E810-cqda2 For Ocp 3.0
Intel Ethernet Network Adapter E810-xxvda2
Intel Ethernet Network Adapter E810-xxvda2 For Ocp
Intel Ethernet Network Adapter E810-xxvda2 For Ocp 3.0
Intel Ethernet Network Adapter E810-xxvda4
Remediation
Event History
Feb 17, 2021
CVE Published
via MITRE·01:41 PM
Data Sourced
via MITRE·01:41 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-24498?
CVE-2020-24498 is a buffer overflow vulnerability in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13.
2
What is the severity of CVE-2020-24498?
The severity of CVE-2020-24498 is medium, with a severity value of 4.4.
3
How does CVE-2020-24498 affect Intel Ethernet Network Adapter E810 firmware?
CVE-2020-24498 affects Intel Ethernet Network Adapter E810 firmware before version 1.4.1.13, potentially enabling denial of service via local access.
4
Is Intel Ethernet Network Adapter E810-cqda1 vulnerable to CVE-2020-24498?
No, Intel Ethernet Network Adapter E810-cqda1 is not vulnerable to CVE-2020-24498.
5
How can I fix CVE-2020-24498?
To fix CVE-2020-24498, update the firmware for Intel Ethernet Network Adapter E810 to version 1.4.1.13 or later.