CVE-2016-8106

CVSS V2 Medium 4.3 CVSS V3 Medium 5.9
Description
A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before version 5.05 allows a remote attacker to stop the controller from processing network traffic working under certain network use conditions.
Overview
  • CVE ID
  • CVE-2016-8106
  • Assigner
  • secure@intel.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2017-01-09T21:59:00
  • Last Modified Date
  • 2017-07-27T01:29:06
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:intel:ethernet_controller_x710_firmware:*:*:*:*:*:*:*:* 1 OR 5.04
cpe:2.3:h:intel:ethernet_controller_x710-am2_sr1zp:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_x710-am2_sr1zq:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_x710-bm2_sllkb:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_x710-bm2_sllkc:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_xl710-am1_sr1zm:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_xl710-am1_sr1zn:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_xl710-am2_sr1zk:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_xl710-am2_sr1zl:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_xl710-bm1_sllk9:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_xl710-bm1_sllka:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_xl710-bm2_sllk7:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_controller_xl710-bm2_sllk8:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:intel:ethernet_controller_xl710_firmware:*:*:*:*:*:*:*:* 1 OR 5.04
cpe:2.3:h:intel:eth_converged_ntwk_adptr_x710-da2_ex710da2g1p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:eth_converged_ntwk_adptr_x710-da4_ex710da4fhg1p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:eth_converged_ntwk_adptr_x710-da4_ex710da4g1p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:eth_converged_ntwk_adptr_xl710-qda1_exl710qda1g1p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:eth_converged_ntwk_adptr_xl710-qda2_exl710qda2g1p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_x710-da2_x710da2:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_x710-da2_x710da2blk:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_x710-da2_x710da2g2p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_x710-da4_x710da4fh:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_x710-da4_x710da4fhblk:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_x710-da4_x710da4fhg2p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_x710-da4_x710da4g2p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_xl710-qda1_xl710qda1:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_xl710-qda1_xl710qda1blk:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_xl710-qda1_xl710qda1g2p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_xl710-qda2_xl710qda2:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_xl710-qda2_xl710qda2blk:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_converged_network_adapter_xl710-qda2_xl710qda2g2p5:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_i\/o_module_xl710-qda1_axx1p40frtiom:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:ethernet_i\/o_module_xl710-qda2_axx2p40frtiom:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:hp:ethernet_10gb_2-port_562flr-sfp\+:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hp:ethernet_10gb_2-port_562sfp\+:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hp:ethernet_10gb_4-port_563sfp\+:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:hp:proliant_xl260a_g9_server:*:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:a:lenovo:converged_hx_series:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:converged_hx5500_appliance:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:converged_hx5510_appliance:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:converged_hx7500_appliance:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:converged_hx7510_appliance:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:nextscale_nx360_m5:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:system_x3250_m5:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:system_x3500_m5:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:system_x3550_m5:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:system_x3650_m5:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:system_x3750_m4:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:system_x3850_x6:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:system_x3950_x6:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkagile_cx2200:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkagile_cx4200:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkagile_cx4600:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkserver_rd350:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkserver_rd450:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkserver_rd550:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkserver_rd650:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkserver_sd350:5.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:lenovo:thinkserver_td350:5.05:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:N/I:N/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 4.3
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 2.9
CVSS Version 3
  • Version
  • 3.0
  • Vector String
  • CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • HIGH
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • NONE
  • Availability Impact
  • HIGH
  • Base Score
  • 5.9
  • Base Severity
  • MEDIUM
  • Exploitability Score
  • 2.2
  • Impact Score
  • 3.6
References
Reference URL Reference Tags
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00063&languageid=en-fr Patch Vendor Advisory
http://www.securityfocus.com/bid/95333 Third Party Advisory VDB Entry
https://support.lenovo.com/us/en/product_security/LEN-12029 Patch Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05368378 Patch Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg22002507
http://www.securitytracker.com/id/1037562
https://security.netapp.com/advisory/ntap-20190731-0001/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2016-8106
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8106
History
Created Old Value New Value Data Type Notes
2022-05-10 09:17:50 Added to TrackCVE
2022-12-02 12:43:42 2017-01-09T21:59Z 2017-01-09T21:59:00 CVE Published Date updated
2022-12-02 12:43:42 2017-07-27T01:29:06 CVE Modified Date updated
2022-12-02 12:43:42 Modified Vulnerability Status updated