« Volver al listado

CVE-2021-33098

Estado: ModificadaMedia (5.5)—

Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Intel — Ethernet 500 Series Controllers Driver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-33098",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Intel(R) Ethernet ixgbe driver for Linux",
          "versions": [
            {
              "status": "affected",
              "version": "before version 3.17.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-11-17T20:15:10.117",
  "references": [
    {
      "url": "https://security.netapp.com/advisory/ntap-20211210-0005/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20211210-0005/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00555.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access."
    },
    {
      "lang": "es",
      "value": "Una comprobación de entrada inapropiada en el controlador Intel(R) Ethernet ixgbe para Linux versiones anteriores a 3.17.3, puede permitir a un usuario autenticado habilitar potencialmente una denegación de servicio por medio de un acceso local."
    }
  ],
  "lastModified": "2026-06-17T03:54:09.260",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:intel:ethernet_500_series_controllers_driver:*:*:*:*:*:linux:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB0E2D74-D292-48C7-B811-17B747B5D857",
              "versionEndExcluding": "3.17.3"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:ethernet_connection_x540:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C954FC52-3817-4E2E-B352-B61EB2F7368C"
            },
            {
              "criteria": "cpe:2.3:h:intel:ethernet_connection_x550:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CFFDDE5-310C-4525-9C51-BBE35DF673F6"
            },
            {
              "criteria": "cpe:2.3:h:intel:ethernet_connection_x557:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "73F07880-1F00-4FA0-9499-11FF068561B5"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}