1. Home
  2. CVE Database
  3. CVE-2019-0149
MEDIUM · 5.5

CVE-2019-0149

Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local acc...

Vulnerability Description

Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
IntelEthernet Controller X710-Tm4 Firmware< 2.8.43
IntelEthernet Controller X710-Tm4-
IntelEthernet Controller X710-At2 Firmware< 2.8.43
IntelEthernet Controller X710-At2-
IntelEthernet Controller Xxv710-Am2 Firmware< 2.8.43
IntelEthernet Controller Xxv710-Am2-
IntelEthernet Controller Xxv710-Am1 Firmware< 2.8.43
IntelEthernet Controller Xxv710-Am1-
IntelEthernet Controller X710-Bm2 Firmware< 2.8.43
IntelEthernet Controller X710-Bm2-
IntelEthernet Controller 710-Bm1 Firmware< 2.8.43
IntelEthernet Controller 710-Bm1-
IntelEthernet 700 Series Software< 24.0

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2019-0149?

CVE-2019-0149 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local acc...

How severe is CVE-2019-0149?

CVE-2019-0149 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-0149?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Ethernet Controller X710-Tm4 Firmware, Intel Ethernet Controller X710-Tm4, Intel Ethernet Controller X710-At2 Firmware, Intel Ethernet Controller X710-At2, Intel Ethernet Controller Xxv710-Am2 Firmware.