Input validation error in Intel products - CVE-2021-33155

Vulnerability identifier: #VU60468

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-33155

CWE-ID: CWE-20

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in firmware. A remote authenticated attacker on the local network can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Intel Wi-Fi 6 AX211
Intel Wi-Fi 6 AX210
Intel Wi-Fi 6 AX201
Intel Wi-Fi 6 AX200
Intel Wireless-AC 9560
Intel Wireless-AC 9462
Intel Wireless-AC 9461
Intel Wireless-AC 9260
Intel Dual Band Wireless-AC 8265
Intel Dual Band Wireless-AC 8260
Intel Dual Band Wireless-AC 3168
Intel Wireless 7265 (Rev D) Family
Intel Dual Band Wireless-AC 3165
Killer Wi-Fi 6E AX1675
Killer Wi-Fi 6 AX1650
Killer Wireless-AC 1550
Intel Wireless Bluetooth
Intel Killer Bluetooth
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
ucode-amd
kernel-firmware
kernel-firmware-nfp
kernel-firmware-network
kernel-firmware-nvidia
kernel-firmware-platform
kernel-firmware-prestera
kernel-firmware-qcom
kernel-firmware-qlogic
kernel-firmware-radeon
kernel-firmware-realtek
kernel-firmware-serial
kernel-firmware-sound
kernel-firmware-ti
kernel-firmware-ueagle
kernel-firmware-usb-network
kernel-firmware-dpaa2
kernel-firmware-all
kernel-firmware-amdgpu
kernel-firmware-ath10k
kernel-firmware-ath11k
kernel-firmware-atheros
kernel-firmware-bluetooth
kernel-firmware-bnx2
kernel-firmware-brcm
kernel-firmware-chelsio
kernel-firmware-i915
kernel-firmware-intel
kernel-firmware-iwlwifi
kernel-firmware-liquidio
kernel-firmware-marvell
kernel-firmware-media
kernel-firmware-mediatek
kernel-firmware-mellanox
kernel-firmware-mwifiex

Install updates from vendor's website.

Intel Wireless Bluetooth - update to 22.100
Intel Killer Bluetooth - update to 22.100
ucode-amd - addressed in versions 20190618-5.22.1, 20191118-3.39.1, 20200107-3.26.1, 20220509-150400.4.5.1
kernel-firmware - addressed in versions 20190618-5.22.1, 20191118-3.39.1, 20200107-3.26.1, 20220509-150400.4.5.1
kernel-firmware-nfp - update to 20220509-150400.4.5.1
kernel-firmware-network - update to 20220509-150400.4.5.1
kernel-firmware-nvidia - update to 20220509-150400.4.5.1
kernel-firmware-platform - update to 20220509-150400.4.5.1
kernel-firmware-prestera - update to 20220509-150400.4.5.1
kernel-firmware-qcom - update to 20220509-150400.4.5.1
kernel-firmware-qlogic - update to 20220509-150400.4.5.1
kernel-firmware-radeon - update to 20220509-150400.4.5.1
kernel-firmware-realtek - update to 20220509-150400.4.5.1
kernel-firmware-serial - update to 20220509-150400.4.5.1
kernel-firmware-sound - update to 20220509-150400.4.5.1
kernel-firmware-ti - update to 20220509-150400.4.5.1
kernel-firmware-ueagle - update to 20220509-150400.4.5.1
kernel-firmware-usb-network - update to 20220509-150400.4.5.1
kernel-firmware-dpaa2 - update to 20220509-150400.4.5.1
kernel-firmware-all - update to 20220509-150400.4.5.1
kernel-firmware-amdgpu - update to 20220509-150400.4.5.1
kernel-firmware-ath10k - update to 20220509-150400.4.5.1
kernel-firmware-ath11k - update to 20220509-150400.4.5.1
kernel-firmware-atheros - update to 20220509-150400.4.5.1
kernel-firmware-bluetooth - update to 20220509-150400.4.5.1
kernel-firmware-bnx2 - update to 20220509-150400.4.5.1
kernel-firmware-brcm - update to 20220509-150400.4.5.1
kernel-firmware-chelsio - update to 20220509-150400.4.5.1
kernel-firmware-i915 - update to 20220509-150400.4.5.1
kernel-firmware-intel - update to 20220509-150400.4.5.1
kernel-firmware-iwlwifi - update to 20220509-150400.4.5.1
kernel-firmware-liquidio - update to 20220509-150400.4.5.1
kernel-firmware-marvell - update to 20220509-150400.4.5.1
kernel-firmware-media - update to 20220509-150400.4.5.1
kernel-firmware-mediatek - update to 20220509-150400.4.5.1
kernel-firmware-mellanox - update to 20220509-150400.4.5.1
kernel-firmware-mwifiex - update to 20220509-150400.4.5.1

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00604.html

• Multiple vulnerabilities in Intel Wireless Bluetooth and Killer Bluetooth
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware