CVE-2020-24500: Buffer Overflow
First published: Wed Feb 17 2021(Updated: )
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable a denial of service via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Ethernet network adapter E810 firmware | <1.4.1.13 | |
| Intel Ethernet Network Adapter E810-CQDA1 for OCP | ||
| Intel Ethernet Network Adapter E810-CQDA1 | ||
| Intel Ethernet Network Adapter E810-CQDA1 for OCP | ||
| Intel Ethernet Network Adapter E810-CQDA2 for OCP 3.0 | ||
| Intel Ethernet Network Controllers and Adapters E810 Series | ||
| Intel Ethernet Network Adapter E810-XXVDA2 for OCP | ||
| Intel Ethernet Network Adapter E810-XXVDA2 | ||
| Intel Ethernet Network Adapter E810-XXVDA2 | ||
| Intel Ethernet Network Controllers and Adapters E810 Series |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-24500?
CVE-2020-24500 is a vulnerability caused by a buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13.
How does CVE-2020-24500 affect Intel Ethernet Network Adapter E810 Firmware?
CVE-2020-24500 affects Intel Ethernet Network Adapter E810 Firmware version 1.4.1.13 and earlier, potentially enabling a denial of service via local access.
What is the severity of CVE-2020-24500?
CVE-2020-24500 has a severity rating of 4.4 (medium).
How can I fix CVE-2020-24500?
To fix CVE-2020-24500, update the firmware for Intel Ethernet Network Adapter E810 to version 1.4.1.13 or newer.
Where can I find more information about CVE-2020-24500?
You can find more information about CVE-2020-24500 at the Intel Security Center Advisory: [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00456.html](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00456.html)
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel ethernet network adapter e810 firmware
- canonical/intel ethernet network adapter e810-cqda1 for ocp
- canonical/intel ethernet network adapter e810-cqda1
- canonical/intel ethernet network adapter e810-cqda2 for ocp 3.0
- canonical/intel ethernet network controllers and adapters e810 series
- canonical/intel ethernet network adapter e810-xxvda2 for ocp
- canonical/intel ethernet network adapter e810-xxvda2