CVE Tools
Sign in

CVE-2015-1142857

Published: Jan 23, 2018Updated: Nov 21, 2024 Sources: CVE List NVDCWE-254
8.6HIGH
NVD MITRE
EPSS Score
2.4%
Top 17.3%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
Patch Available
Self-Check
OpenVAS

Description

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.

No summary for this CVE yet.

CVSS Vector Breakdown

AV:NAC:LPR:NUI:NS:CC:NI:NA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:CScope
Changed
Impact
C:NConfidentiality
None
I:NIntegrity
None
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

CWE-254

Affected Products

intel
commercial·USaka intel corp.
x710 firmware
Hardware Firmware
82599 firmware
Hardware Firmware
x540 firmware
Hardware Firmware
i350 firmware
Hardware Firmware
82576 firmware
Hardware Firmware
linux
oss-projectaka the linux kernel
linux kernel ixgbeOn-prem
Operating Systems / linux-distro
linux kernel i40e\/i40evfOn-prem
Operating Systems / linux-distro
dpdk
oss-projectaka data plane development kit
dpdkEmbedded
OSS Libraries / generic-library
and 1 more affected products View all →

Exploitability

Official Patch Available
Workaround Available
Is your org exposed to CVE-2015-1142857?We can run the check for you — a free external exposure review, no install. Check my exposure

References

http://seclists.org/oss-sec/2015/q4/425
seclists.org
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00046&languageid=en-fr
security-center.intel.com
https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-smolyar.pdf
usenix.org

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2015-1142857 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows