exploitDog

CVE-2021-22600

Опубликовано: 26 янв. 2022

Источник: nvd

CVSS3: 6.6

CVSS3: 7

CVSS2: 7.2

EPSS Низкий

Описание

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Ссылки

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
Mailing List
Patch
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230110-0002/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5096
Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
Mailing List
Patch
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230110-0002/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5096
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.14.175 (включая) до 4.14.259 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.19.114 (включая) до 4.19.222 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.4.29 (включая) до 5.4.168 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5.14 (включая) до 5.10.88 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.11 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00057

Низкий

6.6 Medium

CVSS3

7 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-415

CWE-415

Связанные уязвимости

CVE-2021-22600

CVSS3: 6.6

ubuntu

больше 3 лет назад

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

CVE-2021-22600

CVSS3: 7

redhat

больше 3 лет назад

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

CVE-2021-22600

CVSS3: 7

msrc

больше 3 лет назад

Описание отсутствует

CVE-2021-22600

CVSS3: 6.6

debian

больше 3 лет назад

A double free bug in packet_set_ring() in net/packet/af_packet.c can b ...

GHSA-6rrc-7vqp-364c

CVSS3: 7.8

github

больше 3 лет назад

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

EPSS

Процентиль: 18%

0.00057

Низкий

6.6 Medium

CVSS3

7 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-415

CWE-415