Linux Kernel Heap Out-of-Bounds Write sérülékenysége
Angol cím: Linux Kernel Heap Out-of-Bounds Write Vulnerability
Publikálás dátuma: 2025.10.07.
Utolsó módosítás dátuma: 2025.10.07.
Leírás
A program a puffer határa előtt vagy után ír adatokat a memóriába.
Leírás forrása: CWE-787 Leírás utolsó módosítása: 2025.09.09.Elemzés leírás
Eredeti nyelven:
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
Elemzés leírás forrása: CVE-2021-22555 Elemzés leírás utolsó módosítása: 2025.10.06.Hatás
CVSS3.1 Súlyosság és Metrika
Base score: 7.8 (Magas)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 1.8
Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality Impact (C): High
Integrity Impact (I): High
Availability Impact (A): High
Következmények
Loss of integrity (Sértetlenség elvesztése)Hivatkozások
packetstormsecurity.com
packetstormsecurity.com
packetstormsecurity.com
packetstormsecurity.com
packetstormsecurity.com
kernel.org
kernel.org
github.com
netapp.com
Sérülékeny szoftverek
Configuration 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* From (including) 2.6.19 Up to (excluding) 4.4.267
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* From (including) 4.5 Up to (excluding) 4.9.267
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* From (including) 4.10 Up to (excluding) 4.14.231
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* From (including) 4.15 Up to (excluding) 4.19.188
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* From (including) 4.20 Up to (excluding) 5.4.113
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* From (including) 5.5 Up to (excluding) 5.10.31
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* From (including) 5.11 Up to (excluding) 5.12
Configuration 2
cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*
Configuration 3
cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*
Running on/with
cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*
Configuration 4
cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*
Running on/with
cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*
Configuration 5
cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*
Running on/with
cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*
Configuration 6
cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*
Running on/with
cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*
Configuration 7
cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*
Running on/with
cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*
Configuration 8
cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*
Running on/with
cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*
Configuration 9
cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
Running on/with
cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*
Configuration 10
cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*
Running on/with
cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*
Configuration 11
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*