CVE-2015-1142857
High
Description
On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.
SeverityHigh
CVSS8.6
Exploit probability—
Product
Linux Kernel Ixgbe
PublishedJan 23, 2018
First seenJan 23, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel_ixgbe | No range specified | — |
| intel x710_firmware | No range specified | — |
| intel 82599_firmware | No range specified | — |
| intel x540_firmware | No range specified | — |
| intel i350_firmware | No range specified | — |
| intel 82576_firmware | No range specified | — |
| linux linux_kernel_i40e\/i40evf | No range specified | — |
| dpdk dpdk | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.