CVE-2021-0002
First published: Wed Aug 11 2021(Updated: )
Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Ethernet Controller E810 | <1.4.11 | |
| Intel Ethernet Network Controller E810 | ||
| Fedoraproject Fedora | =33 | |
| Fedoraproject Fedora | =34 | |
| Fedoraproject Fedora | =35 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EUZYFCI7N4TFZSIGA7WGZ4Q7V3EK76GH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKMUMLUH6ENNMLGTJ5AFRF6764ILEMYJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MFLYHRQPDF6ZMESCI3HRNOP6D6GELPFR/
- https://security.netapp.com/advisory/ntap-20210827-0008/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00515.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUZYFCI7N4TFZSIGA7WGZ4Q7V3EK76GH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKMUMLUH6ENNMLGTJ5AFRF6764ILEMYJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFLYHRQPDF6ZMESCI3HRNOP6D6GELPFR/
Frequently Asked Questions
What is CVE-2021-0002?
CVE-2021-0002 is a vulnerability in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 that may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
What is the severity of CVE-2021-0002?
The severity of CVE-2021-0002 is high with a CVSS score of 7.1.
Which software is affected by CVE-2021-0002?
Intel Ethernet Controller E810 Firmware versions up to exclusive 1.4.11 are affected. Fedora 33, 34, and 35 are also affected.
How can an authenticated user exploit CVE-2021-0002?
An authenticated user can potentially enable information disclosure or denial of service via local access.
Is Intel Ethernet Controller E810 vulnerable to CVE-2021-0002?
No, Intel Ethernet Controller E810 is not vulnerable to CVE-2021-0002.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/intel
- canonical/intel ethernet controller e810
- canonical/intel ethernet network controller e810
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/33
- version/fedoraproject fedora/34
- version/fedoraproject fedora/35