NVD Vulnerability Detail

CVE-2013-1634

Summary	A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing state when parsing 32 hex, 33 hex, or 34 hex byte values at the 0x47f offset. NOTE: A followup statement from Intel suggests that the root cause of this issue was an incorrectly configured EEPROM image.
Publication Date	Feb. 14, 2020, 7:15 a.m.
Registration Date	Jan. 26, 2021, 3:36 p.m.
Last Update	Nov. 21, 2024, 10:50 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:intel:82574l_controller_firmware::::::::			2013-02-06
execution environment
1	cpe:2.3:h:intel:82574l_controller:-:::::::*

Related information, measures and tools

No	URL	タグ
1	http://blog.krisk.org/2013/02/packets-of-death.html	Technical Description Third Party Advisory
2	http://blog.krisk.org/2013/02/packets-of-death.html	Technical Description Third Party Advisory
3	http://web.archive.org/web/20131205055429/https://communities.intel.com/community/wired/blog/2013/02/07/intel-82574l-gigabit-ethernet-controller-statement	Vendor Advisory
4	http://web.archive.org/web/20131205055429/https://communities.intel.com/community/wired/blog/2013/02/07/intel-82574l-gigabit-ethernet-controller-statement	Vendor Advisory
5	http://www.openwall.com/lists/oss-security/2013/02/12/3	Mailing List Third Party Advisory
6	http://www.openwall.com/lists/oss-security/2013/02/12/3	Mailing List Third Party Advisory
7	http://www.openwall.com/lists/oss-security/2013/02/12/4	Mailing List Third Party Advisory
8	http://www.openwall.com/lists/oss-security/2013/02/12/4	Mailing List Third Party Advisory
9	http://www.securitytracker.com/id/1028089	Third Party Advisory VDB Entry
10	http://www.securitytracker.com/id/1028089	Third Party Advisory VDB Entry
11	https://exchange.xforce.ibmcloud.com/vulnerabilities/85069	Third Party Advisory VDB Entry
12	https://exchange.xforce.ibmcloud.com/vulnerabilities/85069	Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-665	不適切な初期化	https://cwe.mitre.org/data/definitions/665.html

JVN Vulnerability Information

Intel e1000e/82574L network controller デバイスにおける初期化に関する脆弱性

Title	Intel e1000e/82574L network controller デバイスにおける初期化に関する脆弱性
Summary	Intel e1000e/82574L network controller デバイスには、初期化に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Feb. 6, 2013, midnight
Registration Date	March 9, 2020, 5:53 p.m.
Last Update	March 9, 2020, 5:53 p.m.

Affected System

インテル

Intel 82574L controller ファームウェア 2013/02/06 まで

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-1634	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1634
National Vulnerability Database (NVD)
2	CVE-2013-1634	https://nvd.nist.gov/vuln/detail/CVE-2013-1634

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-665	https://cwe.mitre.org/data/definitions/665.html

ベンダー情報

No	Name	URL
Intel
1	Top Page	https://www.intel.com/content/www/us/en/homepage.html

その他

No	Name	URL
関連文書
1	Intel 82574L Gigabit Ethernet Controller Statement	http://web.archive.org/web/20131205055429/https://communities.intel.com/community/wired/blog/2013/02/07/intel-82574l-gigabit-ethernet-controller-statement
2	Packets of Death	http://blog.krisk.org/2013/02/packets-of-death.html

Change Log

No	Changed Details	Date of change
1	[2020年03月09日] 掲載	March 9, 2020, 5:53 p.m.