CVE-2015-2291

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Oct 1, 2026

Description

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.htmlThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/79623Broken Link, Third Party Advisory, VDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-frPatch, Vendor Advisory
https://www.exploit-db.com/exploits/36392/Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.htmlThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/79623Broken Link, Third Party Advisory, VDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-frPatch, Vendor Advisory
https://www.exploit-db.com/exploits/36392/Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291US Government Resource

Timeline

Published: Aug 9, 2017
Last modified: Oct 1, 2026
Added to CISA KEV: Feb 10, 2023
NVD status: Analyzed

Related CVEs from 2015

CVE-2015-22926.5Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x be CVE-2015-22936.8Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin be CVE-2015-22944.3Multiple cross-site scripting (XSS) vulnerabilities in the WebGUI in pfSense before 2.2.1 allow remote attackers to inject arbitrary web scr CVE-2015-22956.8Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote CVE-2015-22966.8The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks vi CVE-2015-22977.5nanohttp in libcsoap allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Aut CVE-2015-22987.5node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information by leveraging an im CVE-2015-23017.5Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote CVE-2015-23046.4Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a f CVE-2015-23056.8Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as us CVE-2015-23086.8Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x bef CVE-2015-23109.1Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of ser