Improper input validation in Intel Ethernet 500 Series Controllers Driver
CVE-2021-33098
Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (20.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Intel Ethernet_500_series_controllers_driver
- Intel Ethernet_connection_x540
- Intel Ethernet_connection_x550
- Intel Ethernet_connection_x557
- N/a Intel(r) Ethernet Ixgbe Driver For Linux — versions before version 3.17.3
Weakness classification (CWE)
References
- secure@intel.com (x_refsource_MISC, Vendor Advisory)
- secure@intel.com (x_refsource_CONFIRM, Third Party Advisory)
Frequently asked questions
- What is CVE-2021-33098?
- CVE-2021-33098 is a medium-severity vulnerability in Intel Ethernet 500 Series Controllers Driver, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2021-11-17.
- How severe is CVE-2021-33098?
- Medium severity. CVSS v3 base score is 5.5 out of 10.