Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• intel ethernet 700 series softwarebefore 24.0
• intel ethernet controller 710-bm1 firmwarebefore 7.0
• intel ethernet controller x710-at2 firmwarebefore 7.0
• intel ethernet controller x710-bm2 firmwarebefore 7.0
• intel ethernet controller x710-tm4 firmwarebefore 7.0
• intel ethernet controller xxv710-am1 firmwarebefore 7.0
• intel ethernet controller xxv710-am2 firmwarebefore 7.0

Versions reported by the vendor

Affected version ranges reported by the assigning authority (intel). Independent of NVD's CPE analysis and usually ahead of it.

• n/a 2019.2 IPU – Intel(R) Ethernet 700 Series Controllers

  • See provided referenceaffected

Other highest-scoring records for the same primary product.

• CVE-2019-0142Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileg
  32Monitor
• CVE-2019-0145Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potential
  31Monitor
• CVE-2019-0144Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potential
  26Monitor
• CVE-2019-0139Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to poten
  26Monitor
• CVE-2019-0149Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated
  22Monitor
• CVE-2019-0148Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially
  22Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.