CVE-2020-24502: Input Validation
First published: Wed Feb 17 2021(Updated: )
Description: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access. References: <a href="https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html">https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html</a>
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-rt | <0:4.18.0-348.rt7.130.el8 | 0:4.18.0-348.rt7.130.el8 |
| redhat/kernel | <0:4.18.0-348.el8 | 0:4.18.0-348.el8 |
| Intel Ethernet network Adapter E810 firmware Linux | <1.0.4 | |
| Intel Ethernet Network Adapter E810-CQDA1 for OCP | ||
| Intel Ethernet Network Adapter E810-CQDA1 | ||
| Intel Ethernet Network Adapter E810-CQDA1 for OCP | ||
| Intel Ethernet Network Adapter E810-CQDA2 for OCP 3.0 | ||
| Intel Ethernet Network Controllers and Adapters E810 Series | ||
| Intel Ethernet Network Adapter E810-XXVDA2 for OCP | ||
| Intel Ethernet Network Adapter E810-XXVDA2 | ||
| Intel Ethernet Network Adapter E810-XXVDA2 | ||
| Intel Ethernet Network Controllers and Adapters E810 Series | ||
| Intel Ethernet network Adapter E810 firmware Windows | <1.4.29.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1930380
- https://access.redhat.com/errata/RHSA-2021:4140
- https://access.redhat.com/errata/RHSA-2021:4356
- https://access.redhat.com/security/cve/cve-2020-24502
- https://bugzilla.redhat.com/show_bug.cgi?id=1930379
- https://www.cve.org/CVERecord?id=CVE-2020-24502 https://nvd.nist.gov/vuln/detail/CVE-2020-24502
Frequently Asked Questions
What is CVE-2020-24502?
CVE-2020-24502 is a vulnerability that affects certain Intel Ethernet E810 Adapter drivers for Linux and Windows, allowing an authenticated user to potentially enable a denial of service via local access.
How severe is CVE-2020-24502?
CVE-2020-24502 has a severity rating of 5.5, which is considered medium.
What software is affected by CVE-2020-24502?
The affected software includes Intel Ethernet E810 Adapter drivers for Linux versions before 1.0.4 and Windows versions before 1.4.29.0, as well as specific versions of the Red Hat kernel.
How can an authenticated user exploit CVE-2020-24502?
An authenticated user can potentially exploit CVE-2020-24502 by using local access to enable a denial of service.
Where can I find more information about CVE-2020-24502?
More information about CVE-2020-24502 can be found at the following references: [CVE-2020-24502](https://www.cve.org/CVERecord?id=CVE-2020-24502), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2020-24502), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1930379), [Red Hat Security Advisory](https://access.redhat.com/errata/RHSA-2021:4140).
- collector/redhat-cve
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-24502
- agent/references
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/redhat
- vendor/intel
- canonical/intel ethernet network adapter e810 firmware linux
- canonical/intel ethernet network adapter e810-cqda1 for ocp
- canonical/intel ethernet network adapter e810-cqda1
- canonical/intel ethernet network adapter e810-cqda2 for ocp 3.0
- canonical/intel ethernet network controllers and adapters e810 series
- canonical/intel ethernet network adapter e810-xxvda2 for ocp
- canonical/intel ethernet network adapter e810-xxvda2
- canonical/intel ethernet network adapter e810 firmware windows