VDB
CVE-2020-24504
CVE-2020-24504
PUBLISHED
CVSS 5.5 MEDIUM
Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.
EPSS 0.30% · 22.3th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.30%
22.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:20.04:LTS | linux-bluefield | 5.4.0-1036.39, 5.4.0-1083.90, 5.4.0-1082.89 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-aws-fips | 5.4.0-1140.151+fips1, 5.4.0-1144.155+fips1, 5.4.0-1145.156+fips1 |
| Ubuntu:18.04:LTS | linux-gke-4.15 | 4.15.0-1044.46, 4.15.0-1072.76, 4.15.0-1079.84 |
| Ubuntu:18.04:LTS | linux-oracle-5.3 | *, *, * |
| Ubuntu:20.04:LTS | linux-riscv-5.11 | 5.11.0-1018.19~20.04.2, *, 5.11.0-1031.35 |
| Ubuntu:20.04:LTS | linux-aws-5.11 | *, *, 0 |
| Ubuntu:18.04:LTS | linux-hwe-edge | *, 5.3.0-23.25~18.04.1, 5.3.0-22.24~18.04.1 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-aws-fips | 5.4.0-1021.21+fips2, 0 |
| Ubuntu:18.04:LTS | linux-aws-5.0 | 0, 5.0.0-1023.26~18.04.1, 5.0.0-1024.27~18.04.1 |
| Ubuntu:Pro:20.04:LTS | linux | 5.4.0-33.37, 5.4.0-29.33, 5.4.0-28.32 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 5.15.0-1073.75, 0 |
| Ubuntu:20.04:LTS | linux-raspi2 | 5.4.0-1004.4, 5.4.0-1006.6, 5.3.0-1017.19 |
| Ubuntu:20.04:LTS | linux-gcp-5.11 | 5.11.0-1026.29~20.04.1, 5.11.0-1024.26~20.04.1, 5.11.0-1023.25~20.04.1 |
| Ubuntu:Pro:20.04:LTS | linux-xilinx-zynqmp | 5.4.0-1056.60, 5.4.0-1031.35, 5.4.0-1033.37 |
| Ubuntu:Pro:20.04:LTS | linux-iot | 5.4.0-1039.40, 5.4.0-1040.41, 5.4.0-1042.43 |
| Ubuntu:Pro:20.04:LTS | linux-ibm | 5.4.0-1028.32, 5.4.0-1078.83, 5.4.0-1089.94 |
| Ubuntu:20.04:LTS | linux-aws-5.8 | 0, 5.8.0-1038.40~20.04.1, 5.8.0-1041.43~20.04.1 |
| Ubuntu:20.04:LTS | linux-hwe-5.11 | 5.11.0-25.27~20.04.1, 5.11.0-22.23~20.04.1, 0 |
| Ubuntu:20.04:LTS | linux-riscv | 5.4.0-40.45, 5.4.0-34.38, 5.4.0-28.32 |
| Ubuntu:22.04:LTS | linux-realtime | 0, 5.15.0-1032.35 |
…and 26 more
Timeline
- Feb 10, 2021 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jul 8, 2022 EPSS Score
- Sep 10, 2022 EPSS Score
- Nov 12, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-24504 advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-24504 third-party-advisory