Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• intel compute module hns2600bp firmwarebefore 1.59
• intel compute module hns2600kp firmwarebefore 1.59
• intel compute module hns2600tp firmwarebefore 1.59
• intel compute module s2600tp firmwarebefore 1.59
• intel server board s1200sp firmwarebefore 1.59
• intel server board s2600bp firmwarebefore 1.59
• intel server board s2600cwbefore 1.59
• intel server board s2600kp firmwarebefore 1.59
• intel server board s2600st firmwarebefore 1.59
• intel server board s2600wf firmwarebefore 1.59
• intel server board s2600wt firmwarebefore 1.59
• intel server system lr1304sp firmwarebefore 1.59
• intel server system lsvrp firmwarebefore 1.59
• intel server system r1000sp firmwarebefore 1.59
• intel server system r1000wf firmwarebefore 1.59
• intel server system r1000wt firmwarebefore 1.59
• intel server system r2000wf firmwarebefore 1.59
• intel server system r2000wt firmwarebefore 1.59

Versions reported by the vendor

Affected version ranges reported by the assigning authority (intel). Independent of NVD's CPE analysis and usually ahead of it.

• n/a Intel(R) Server Boards, Server Systems and Compute Modules Advisory

  • Before version 1.59affected

Other highest-scoring records for the same primary product.

• CVE-2020-8732Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow
  35Monitor
• CVE-2020-8731Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before versi
  35Monitor
• CVE-2020-8730Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user
  35Monitor
• CVE-2020-8718Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenti
  35Monitor
• CVE-2020-8713Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated
  35Monitor
• CVE-2020-8709Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow
  35Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.