CVE-2015-1142857
Last modified
CVE-2015-1142857 is a vulnerability of currently unknown severity. On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.. EPSS estimates a 2.48% chance of exploitation in the next 30 days.
Description
On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | X710 Firmware | All versions |
| Intel | 82599 Firmware | All versions |
| Intel | X540 Firmware | All versions |
| Intel | I350 Firmware | All versions |
| Intel | 82576 Firmware | All versions |
| Linux | Linux Kernel Ixgbe | All versions |
| Linux | Linux Kernel I40e\/I40evf | All versions |
| Dpdk | Dpdk | All versions |
References
- http://seclists.org/oss-sec/2015/q4/425Mailing List, Patch, Third Party Advisory
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00046&languageid=en-frMitigation, Vendor Advisory
- https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-smolyar.pdfTechnical Description, Third Party Advisory
- http://seclists.org/oss-sec/2015/q4/425Mailing List, Patch, Third Party Advisory
- https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00046&languageid=en-frMitigation, Vendor Advisory
- https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-smolyar.pdfTechnical Description, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-1142857?
How severe is CVE-2015-1142857?
How do I fix CVE-2015-1142857?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-1137The NVIDIA graphics driver in Apple OS X before 10.10.3 allo…
- CVE-2015-1138Hypervisor in Apple OS X before 10.10.3 allows local users t…
- CVE-2015-1139ImageIO in Apple OS X before 10.10.3 allows remote attackers…
- CVE-2015-1140Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 …
- CVE-2015-1141The mach_vm_read functionality in the kernel in Apple OS X b…
- CVE-2015-1142LaunchServices in Apple OS X before 10.10.3 allows local use…
- CVE-2015-1143LaunchServices in Apple OS X before 10.10.3 allows local use…
- CVE-2015-1144Buffer overflow in the UniformTypeIdentifiers component in A…
- CVE-2015-1145The Code Signing implementation in Apple OS X before 10.10.3…
- CVE-2015-1146The Code Signing implementation in Apple OS X before 10.10.3…
- CVE-2015-1147Open Directory Client in Apple OS X before 10.10.3 sends une…
- CVE-2015-1148Screen Sharing in Apple OS X before 10.10.3 stores the passw…
Are you affected by CVE-2015-1142857?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
