Details of VAR-202103-0920

ID

VAR-202103-0920

CVE

CVE-2021-27363

TITLE

Linux Kernel Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2021-004361

DESCRIPTION

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables. Linux Kernel Contains an unspecified vulnerability.Information is obtained and denial of service (DoS) It may be put into a state. Description: Red Hat Advanced Cluster Management for Kubernetes 2.2.2 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_mana gement_for_kubernetes/2.2/html/release_notes/ Security Fix(es): * fastify-reply-from: crafted URL allows prefix scape of the proxied backend service (CVE-2021-21321) * fastify-http-proxy: crafted URL allows prefix scape of the proxied backend service (CVE-2021-21322) * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040) * nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions (CVE-2020-28500) * golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing - -u- extension (CVE-2020-28851) * golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852) * go-slug: partial protection against zip slip attacks (CVE-2020-29529) * nodejs-lodash: command injection via template (CVE-2021-23337) * openssl: integer overflow in CipherUpdate (CVE-2021-23840) * openssl: NULL pointer dereference in X509_issuer_and_serial_hash() (CVE-2021-23841) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Documentation is referencing deprecated API for Service Export - Submariner (BZ#1936528) * Importing of cluster fails due to error/typo in generated command (BZ#1936642) * RHACM 2.2.2 images (BZ#1938215) * 2.2 clusterlifecycle fails to allow provision `fips: true` clusters on aws, vsphere (BZ#1941778) 3. Bugs fixed (https://bugzilla.redhat.com/): 1853652 - CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash 1913333 - CVE-2020-28851 golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension 1913338 - CVE-2020-28852 golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag 1914238 - CVE-2020-29529 go-slug: partial protection against zip slip attacks 1928937 - CVE-2021-23337 nodejs-lodash: command injection via template 1928954 - CVE-2020-28500 nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions 1930310 - CVE-2021-23841 openssl: NULL pointer dereference in X509_issuer_and_serial_hash() 1930324 - CVE-2021-23840 openssl: integer overflow in CipherUpdate 1936528 - Documentation is referencing deprecated API for Service Export - Submariner 1936642 - Importing of cluster fails due to error/typo in generated command 1938215 - RHACM 2.2.2 images 1941778 - 2.2 clusterlifecycle fails to allow provision `fips: true` clusters on aws, vsphere 1942178 - CVE-2021-21321 fastify-reply-from: crafted URL allows prefix scape of the proxied backend service 1942182 - CVE-2021-21322 fastify-http-proxy: crafted URL allows prefix scape of the proxied backend service 5. 8.2) - x86_64 3. Description: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Bug Fix(es): * kernel-rt: update RT source tree to the latest RHEL-8.2.z8 Batch source tree (BZ#1916765) 4. Bug Fix(es): * Enable CI and changelog for GitLab workflow (BZ#1930934) 4. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security and bug fix update Advisory ID: RHSA-2021:1531-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:1531 Issue date: 2021-05-11 CVE Names: CVE-2019-19532 CVE-2020-25211 CVE-2020-25705 CVE-2020-28374 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) - x86_64 Red Hat Enterprise Linux Server EUS (v. 7.7) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 7.7) - ppc64, ppc64le, x86_64 3. Security Fix(es): * kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c (CVE-2020-25211) * kernel: SCSI target (LIO) write to any block on ILO backstore (CVE-2020-28374) * kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) * kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) * kernel: malicious USB devices can lead to multiple out-of-bounds write (CVE-2019-19532) * kernel: ICMP rate limiting can be used for DNS poisoning attack (CVE-2020-25705) * kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * memcg: mem_cgroup_idr can be updated in an uncoordinated manner which can lead to corruption (BZ#1931899) * [infiniband] Backport Request to fix Multicast Sendonly joins (BZ#1937819) * [Azure][RHEL-7]Mellanox Patches To Prevent Kernel Hang In MLX4 (BZ#1939791) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1781821 - CVE-2019-19532 kernel: malicious USB devices can lead to multiple out-of-bounds write 1877571 - CVE-2020-25211 kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c 1894579 - CVE-2020-25705 kernel: ICMP rate limiting can be used for DNS poisoning attack 1899804 - CVE-2020-28374 kernel: SCSI target (LIO) write to any block on ILO backstore 1930078 - CVE-2021-27365 kernel: heap buffer overflow in the iSCSI subsystem 1930079 - CVE-2021-27363 kernel: iscsi: unrestricted access to sessions and handles 1930080 - CVE-2021-27364 kernel: out-of-bounds read in libiscsi module 6. Package List: Red Hat Enterprise Linux ComputeNode EUS (v. 7.7): Source: kernel-3.10.0-1062.49.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-1062.49.1.el7.noarch.rpm kernel-doc-3.10.0-1062.49.1.el7.noarch.rpm x86_64: bpftool-3.10.0-1062.49.1.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debug-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1062.49.1.el7.x86_64.rpm kernel-devel-3.10.0-1062.49.1.el7.x86_64.rpm kernel-headers-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-1062.49.1.el7.x86_64.rpm perf-3.10.0-1062.49.1.el7.x86_64.rpm perf-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm python-perf-3.10.0-1062.49.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7): x86_64: bpftool-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-1062.49.1.el7.x86_64.rpm perf-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm Red Hat Enterprise Linux Server EUS (v. 7.7): Source: kernel-3.10.0-1062.49.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-1062.49.1.el7.noarch.rpm kernel-doc-3.10.0-1062.49.1.el7.noarch.rpm ppc64: bpftool-3.10.0-1062.49.1.el7.ppc64.rpm bpftool-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm kernel-3.10.0-1062.49.1.el7.ppc64.rpm kernel-bootwrapper-3.10.0-1062.49.1.el7.ppc64.rpm kernel-debug-3.10.0-1062.49.1.el7.ppc64.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm kernel-debug-devel-3.10.0-1062.49.1.el7.ppc64.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-1062.49.1.el7.ppc64.rpm kernel-devel-3.10.0-1062.49.1.el7.ppc64.rpm kernel-headers-3.10.0-1062.49.1.el7.ppc64.rpm kernel-tools-3.10.0-1062.49.1.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm kernel-tools-libs-3.10.0-1062.49.1.el7.ppc64.rpm perf-3.10.0-1062.49.1.el7.ppc64.rpm perf-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm python-perf-3.10.0-1062.49.1.el7.ppc64.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm ppc64le: bpftool-3.10.0-1062.49.1.el7.ppc64le.rpm bpftool-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-debug-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-devel-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-headers-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-tools-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-tools-libs-3.10.0-1062.49.1.el7.ppc64le.rpm perf-3.10.0-1062.49.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm python-perf-3.10.0-1062.49.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm s390x: bpftool-3.10.0-1062.49.1.el7.s390x.rpm bpftool-debuginfo-3.10.0-1062.49.1.el7.s390x.rpm kernel-3.10.0-1062.49.1.el7.s390x.rpm kernel-debug-3.10.0-1062.49.1.el7.s390x.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.s390x.rpm kernel-debug-devel-3.10.0-1062.49.1.el7.s390x.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.s390x.rpm kernel-debuginfo-common-s390x-3.10.0-1062.49.1.el7.s390x.rpm kernel-devel-3.10.0-1062.49.1.el7.s390x.rpm kernel-headers-3.10.0-1062.49.1.el7.s390x.rpm kernel-kdump-3.10.0-1062.49.1.el7.s390x.rpm kernel-kdump-debuginfo-3.10.0-1062.49.1.el7.s390x.rpm kernel-kdump-devel-3.10.0-1062.49.1.el7.s390x.rpm perf-3.10.0-1062.49.1.el7.s390x.rpm perf-debuginfo-3.10.0-1062.49.1.el7.s390x.rpm python-perf-3.10.0-1062.49.1.el7.s390x.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.s390x.rpm x86_64: bpftool-3.10.0-1062.49.1.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debug-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1062.49.1.el7.x86_64.rpm kernel-devel-3.10.0-1062.49.1.el7.x86_64.rpm kernel-headers-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-1062.49.1.el7.x86_64.rpm perf-3.10.0-1062.49.1.el7.x86_64.rpm perf-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm python-perf-3.10.0-1062.49.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional EUS (v. 7.7): ppc64: bpftool-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-1062.49.1.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm kernel-tools-libs-devel-3.10.0-1062.49.1.el7.ppc64.rpm perf-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.ppc64.rpm ppc64le: bpftool-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-debug-devel-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-1062.49.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.ppc64le.rpm x86_64: bpftool-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-1062.49.1.el7.x86_64.rpm perf-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1062.49.1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-19532 https://access.redhat.com/security/cve/CVE-2020-25211 https://access.redhat.com/security/cve/CVE-2020-25705 https://access.redhat.com/security/cve/CVE-2020-28374 https://access.redhat.com/security/cve/CVE-2021-27363 https://access.redhat.com/security/cve/CVE-2021-27364 https://access.redhat.com/security/cve/CVE-2021-27365 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYJp5j9zjgjWX9erEAQhC0g/+KmsFyDRsEhl/e7YbZEIbSywgiDaA8g+8 yt3CEB4+jdNsAgtzwc1OzfRvA22nZdtiTloz7e5FcKAVtnTfrKoi0mC7cfICSdIH dX/vktbISFfwCZ5ACpqk7hJTdZNwOOvQk2n0vir0PtnMraUt4rvX3vInc7i7Zvvf TNFRn+4umvqv9cdCE7iYwFhtiwbqEZzSeel+lvhtBAstgEr+BsEsr4z84q+2sw5U pxZUWWUYYTsIda/McG5BE/kQH+ok8LNDqKwVSx3+rHTLS7PttdukFzs3UJ8GNNx/ k24ENChiuKWvqbCvtYQmRs5AoPydhuZ8fw6OsLIeqHrjIrx0O+wp+R9YZKTkp6Qk KU36WlLW1YGRumNV8FD1s2UGdk3+B9CfUetEjATOqoKz2WGi4n9kOgRUdoh7HuUQ IDsH4yqUBBneoCqjJXpM9X0pvAK4q2+B1p3dCHGfXQ5BTKViSi0afEslFIDzCzwG 3gj3oQWZWlmxuYSwwH3hC6Lxkwq5NpBFaamuyOS5VQXKC/a/OM4F+hMqnMOYuMJm OlCocozw7hCvL2SHpy5OW4Z9CBEsq/oiR/8+ugvGZXte5gxYGa28ToQMqScQo5hS 7pkZo+yxph5/PspSuVXSE1f6nofE95nyagJumeSu8mA2kU7ENTp/Tw/LcFQLIOHx F2TT4nkP8AQ=nj71 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . Linux kernel vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 20.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 ESM Summary Several security issues were fixed in the kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2020-27170) Piotr Krysiuk discovered that the BPF subsystem in the Linux kernel did not properly compute a speculative execution limit on pointer arithmetic in some situations. A local attacker could use this to expose sensitive information (kernel memory). A local attacker could use this to cause a denial of service (system crash). (CVE-2020-29372) It was discovered that the memory management subsystem in the Linux kernel did not properly handle copy-on-write operations in some situations. A local attacker could possibly use this to gain unintended write access to read-only memory pages. (CVE-2020-29374) De4dCr0w of 360 Alpha Lab discovered that the BPF verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker could use this to expose sensitive information (kernel memory) or possibly execute arbitrary code. (CVE-2021-3444) Adam Nichols discovered that the iSCSI subsystem in the Linux kernel did not properly restrict access to iSCSI transport handles. A local attacker could use this to cause a denial of service or expose sensitive information (kernel pointer addresses). A local attacker could use this to cause a denial of service (system crash) or expose sensitive information (kernel memory). A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-27365) Update instructions The problem can be corrected by updating your kernel livepatch to the following versions: Ubuntu 18.04 LTS aws - 75.2 generic - 75.2 gke - 75.2 gkeop - 75.2 lowlatency - 75.2 oem - 75.2 Ubuntu 20.04 LTS aws - 75.2 azure - 75.2 gcp - 75.2 generic - 75.2 gke - 75.2 gkeop - 75.2 lowlatency - 75.2 Ubuntu 16.04 LTS aws - 75.3 azure - 75.2 generic - 75.3 lowlatency - 75.3 Ubuntu 14.04 ESM generic - 75.3 lowlatency - 75.3 Support Information Kernels older than the levels listed below do not receive livepatch updates. If you are running a kernel version earlier than the one listed below, please upgrade your kernel as soon as possible. Ubuntu 18.04 LTS linux-aws - 4.15.0-1054 linux-gke-4.15 - 4.15.0-1076 linux-gke-5.4 - 5.4.0-1009 linux-gkeop-5.4 - 5.4.0-1007 linux-hwe-5.4 - 5.4.0-26 linux-oem - 4.15.0-1063 linux - 4.15.0-69 Ubuntu 20.04 LTS linux-aws - 5.4.0-1009 linux-azure - 5.4.0-1010 linux-gcp - 5.4.0-1009 linux-gke - 5.4.0-1033 linux-gkeop - 5.4.0-1009 linux-oem - 5.4.0-26 linux - 5.4.0-26 Ubuntu 16.04 LTS linux-aws - 4.4.0-1098 linux-azure - 4.15.0-1063 linux-hwe - 4.15.0-69 linux - 4.4.0-168 Ubuntu 14.04 ESM linux-lts-xenial - 4.4.0-168 References - CVE-2020-27170 - CVE-2020-27171 - CVE-2020-29372 - CVE-2020-29374 - CVE-2021-3444 - CVE-2021-27363 - CVE-2021-27364 - CVE-2021-27365 -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Trust: 2.34

sources: NVD: CVE-2021-27363 // JVNDB: JVNDB-2021-004361 // VULHUB: VHN-386598 // VULMON: CVE-2021-27363 // PACKETSTORM: 162341 // PACKETSTORM: 162151 // PACKETSTORM: 162246 // PACKETSTORM: 162255 // PACKETSTORM: 162528 // PACKETSTORM: 162117

AFFECTED PRODUCTS

vendor:	linux	model:	kernel	scope:	lte	version:	5.11.3	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	9.0	Trust: 1.0
vendor:	netapp	model:	solidfire baseboard management controller	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	cloud backup	scope:	eq	version:	-	Trust: 1.0
vendor:	debian	model:	gnu/linux	scope:	-	version:	-	Trust: 0.8
vendor:	linux	model:	kernel	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-004361 // NVD: CVE-2021-27363

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-27363
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2021-27363
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202103-523
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-386598
value:	LOW
Trust: 0.1
VULMON:	CVE-2021-27363
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2021-27363
severity:	LOW
baseScore:	3.6
vectorString:	AV:L/AC:L/AU:N/C:P/I:N/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-386598
severity:	LOW
baseScore:	3.6
vectorString:	AV:L/AC:L/AU:N/C:P/I:N/A:P
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	3.9
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2021-27363
baseSeverity:	MEDIUM
baseScore:	4.4
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	1.8
impactScore:	2.5
version:	3.1
Trust: 1.0
NVD:	CVE-2021-27363
baseSeverity:	MEDIUM
baseScore:	4.4
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-386598 // VULMON: CVE-2021-27363 // JVNDB: JVNDB-2021-004361 // CNNVD: CNNVD-202103-523 // NVD: CVE-2021-27363

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD Evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-004361 // NVD: CVE-2021-27363

THREAT TYPE

local

Trust: 0.7

sources: PACKETSTORM: 162117 // CNNVD: CNNVD-202103-523

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202103-523

PATCH

title:	iscsi	url:	https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html	Trust: 0.8
title:	Red Hat: CVE-2021-27363	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2021-27363	Trust: 0.1
title:	Arch Linux Issues:	url:	https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues&qid=CVE-2021-27363 log	Trust: 0.1
title:	Amazon Linux 2: ALAS2LIVEPATCH-2021-043	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2LIVEPATCH-2021-043	Trust: 0.1
title:	Amazon Linux 2: ALAS2LIVEPATCH-2021-042	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2LIVEPATCH-2021-042	Trust: 0.1
title:	Amazon Linux 2: ALAS2LIVEPATCH-2021-044	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2LIVEPATCH-2021-044	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2021-1487	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2021-1487	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2021-1616	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2021-1616	Trust: 0.1
title:	Amazon Linux 2: ALAS2KERNEL-5.4-2022-001	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2KERNEL-5.4-2022-001	Trust: 0.1
title:	IBM: Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog&qid=e9d6f12dfd14652e2bb7e5c28ded162b	Trust: 0.1
title:	Presentation2_Markdown	url:	https://github.com/aaronxie55/Presentation2_Markdown	Trust: 0.1
title:	kernel-5.11.6-expSEHDsec-HAXM-cgroup-virtio	url:	https://github.com/c4pt000/kernel-5.11.6-expSEHDsec-HAXM-cgroup-virtio	Trust: 0.1
title:	kernel-5.11.6-expSEHDsec-HAXM-cgroup-virtio-nvidia-amd	url:	https://github.com/c4pt000/kernel-5.11.6-expSEHDsec-HAXM-cgroup-virtio-nvidia-amd	Trust: 0.1
title:	kernel-5.11.6-expSEHDsec-HAXM-cgroup-virtio-nvidia-amd-kaliwifi	url:	https://github.com/c4pt000/kernel-5.11.6-expSEHDsec-HAXM-cgroup-virtio-nvidia-amd-kaliwifi	Trust: 0.1
title:	kernel-5.11.6-expSEHDsec-cgroup-virtio	url:	https://github.com/c4pt000/kernel-5.11.6-expSEHDsec-cgroup-virtio	Trust: 0.1
title:	kernel-5.11.6-expSEHDsec	url:	https://github.com/c4pt000/kernel-5.11.6-expSEHDsec	Trust: 0.1
title:	-	url:	https://github.com/teresaweber685/book_list	Trust: 0.1
title:	cve_diff_checker	url:	https://github.com/lcatro/cve_diff_checker	Trust: 0.1
title:	-	url:	https://github.com/vincent-deng/veracode-container-security-finding-parser	Trust: 0.1

sources: VULMON: CVE-2021-27363 // JVNDB: JVNDB-2021-004361

EXTERNAL IDS

db:	NVD	id:	CVE-2021-27363	Trust: 3.2
db:	OPENWALL	id:	OSS-SECURITY/2021/03/06/1	Trust: 2.6
db:	PACKETSTORM	id:	162117	Trust: 1.9
db:	PACKETSTORM	id:	162341	Trust: 0.8
db:	PACKETSTORM	id:	162528	Trust: 0.8
db:	PACKETSTORM	id:	162151	Trust: 0.8
db:	JVNDB	id:	JVNDB-2021-004361	Trust: 0.8
db:	PACKETSTORM	id:	161952	Trust: 0.7
db:	PACKETSTORM	id:	162478	Trust: 0.7
db:	PACKETSTORM	id:	162095	Trust: 0.7
db:	PACKETSTORM	id:	161909	Trust: 0.7
db:	PACKETSTORM	id:	162383	Trust: 0.7
db:	PACKETSTORM	id:	162108	Trust: 0.7
db:	PACKETSTORM	id:	162242	Trust: 0.7
db:	PACKETSTORM	id:	162337	Trust: 0.7
db:	CNNVD	id:	CNNVD-202103-523	Trust: 0.7
db:	AUSCERT	id:	ESB-2021.1589	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1694	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1655	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.0837	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1406	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1339	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1224	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1307	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1184	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1002	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.2589	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.3346	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1558	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1299	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1635	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.2136	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1445	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.0981	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1212	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1151	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1669	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.2781	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.1101	Trust: 0.6
db:	CS-HELP	id:	SB2021051001	Trust: 0.6
db:	CS-HELP	id:	SB2021042828	Trust: 0.6
db:	CS-HELP	id:	SB2021050609	Trust: 0.6
db:	CS-HELP	id:	SB2021041608	Trust: 0.6
db:	CS-HELP	id:	SB2021041223	Trust: 0.6
db:	CS-HELP	id:	SB2021051317	Trust: 0.6
db:	CS-HELP	id:	SB2021042136	Trust: 0.6
db:	PACKETSTORM	id:	162246	Trust: 0.2
db:	PACKETSTORM	id:	162255	Trust: 0.2
db:	PACKETSTORM	id:	162115	Trust: 0.1
db:	PACKETSTORM	id:	162156	Trust: 0.1
db:	PACKETSTORM	id:	161973	Trust: 0.1
db:	PACKETSTORM	id:	162247	Trust: 0.1
db:	PACKETSTORM	id:	162098	Trust: 0.1
db:	PACKETSTORM	id:	162346	Trust: 0.1
db:	PACKETSTORM	id:	162112	Trust: 0.1
db:	VULHUB	id:	VHN-386598	Trust: 0.1
db:	VULMON	id:	CVE-2021-27363	Trust: 0.1

sources: VULHUB: VHN-386598 // VULMON: CVE-2021-27363 // JVNDB: JVNDB-2021-004361 // PACKETSTORM: 162341 // PACKETSTORM: 162151 // PACKETSTORM: 162246 // PACKETSTORM: 162255 // PACKETSTORM: 162528 // PACKETSTORM: 162117 // CNNVD: CNNVD-202103-523 // NVD: CVE-2021-27363

REFERENCES

url:	http://www.openwall.com/lists/oss-security/2021/03/06/1	Trust: 2.6
url:	https://nvd.nist.gov/vuln/detail/cve-2021-27363	Trust: 2.0
url:	https://security.netapp.com/advisory/ntap-20210409-0001/	Trust: 1.8
url:	http://packetstormsecurity.com/files/162117/kernel-live-patch-security-notice-lsn-0075-1.html	Trust: 1.8
url:	https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html	Trust: 1.8
url:	https://bugzilla.suse.com/show_bug.cgi?id=1182716	Trust: 1.8
url:	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa	Trust: 1.8
url:	https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html	Trust: 1.8
url:	https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html	Trust: 1.8
url:	https://access.redhat.com/security/cve/cve-2021-27363	Trust: 1.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-27364	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2021-27365	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.0837	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021051001	Trust: 0.6
url:	https://packetstormsecurity.com/files/162095/red-hat-security-advisory-2021-1070-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1589	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1445	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1307	Trust: 0.6
url:	https://packetstormsecurity.com/files/162242/red-hat-security-advisory-2021-1267-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1406	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021042828	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1669	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.2781	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1151	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.0981	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1212	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021041223	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021042136	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1299	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1694	Trust: 0.6
url:	https://packetstormsecurity.com/files/161952/ubuntu-security-notice-usn-4887-1.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021051317	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.3346	Trust: 0.6
url:	https://packetstormsecurity.com/files/161909/ubuntu-security-notice-usn-4883-1.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021050609	Trust: 0.6
url:	https://packetstormsecurity.com/files/162341/red-hat-security-advisory-2021-1373-01.html	Trust: 0.6
url:	https://vigilance.fr/vulnerability/linux-kernel-read-write-access-via-iscsi-show-transport-handle-34762	Trust: 0.6
url:	https://packetstormsecurity.com/files/162108/red-hat-security-advisory-2021-1081-01.html	Trust: 0.6
url:	https://www.ibm.com/blogs/psirt/security-bulletin-ibm-data-risk-manager-is-affected-by-multiple-vulnerabilities-4/	Trust: 0.6
url:	https://packetstormsecurity.com/files/162151/red-hat-security-advisory-2021-1168-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/162478/red-hat-security-advisory-2021-1429-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021041608	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1558	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1635	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1655	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.2589	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1339	Trust: 0.6
url:	https://packetstormsecurity.com/files/162337/red-hat-security-advisory-2021-1369-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1184	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1224	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.2136	Trust: 0.6
url:	https://www.ibm.com/support/pages/node/6525030	Trust: 0.6
url:	https://packetstormsecurity.com/files/162528/red-hat-security-advisory-2021-1531-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1002	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.1101	Trust: 0.6
url:	https://packetstormsecurity.com/files/162383/red-hat-security-advisory-2021-1448-01.html	Trust: 0.6
url:	https://www.ibm.com/blogs/psirt/security-bulletin-ibm-qradar-network-packet-capture-is-vulnerable-to-using-components-with-known-vulnerabilities-2/	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2021-27364	Trust: 0.5
url:	https://listman.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.5
url:	https://bugzilla.redhat.com/):	Trust: 0.5
url:	https://access.redhat.com/articles/11258	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2021-27365	Trust: 0.5
url:	https://access.redhat.com/security/team/contact/	Trust: 0.5
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.5
url:	https://access.redhat.com/security/team/key/	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2021-3347	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2020-28374	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3347	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2020-28374	Trust: 0.2
url:	https://cwe.mitre.org/data/definitions/.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://github.com/aaronxie55/presentation2_markdown	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:1373	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-21321	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:1168	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-29529	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-28851	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_mana	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-29529	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-28500	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3121	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3449	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3449	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-23337	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-28851	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-23841	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3121	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-26708	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-0466	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-27152	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-23337	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-23840	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-23841	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-28852	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-28500	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-21322	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-27152	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-3450	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-23840	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3450	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-28852	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-14040	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-21321	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-21322	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-0466	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-14040	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-26708	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:1279	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:1289	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-25211	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:1531	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-25705	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-19532	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-25705	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-25211	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-19532	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-27170	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-27171	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-29372	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3444	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-29374	Trust: 0.1
url:	https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce	Trust: 0.1

CREDITS

Red Hat

Trust: 1.1

sources: PACKETSTORM: 162341 // PACKETSTORM: 162151 // PACKETSTORM: 162246 // PACKETSTORM: 162255 // PACKETSTORM: 162528 // CNNVD: CNNVD-202103-523

SOURCES

db:	VULHUB	id:	VHN-386598
db:	VULMON	id:	CVE-2021-27363
db:	JVNDB	id:	JVNDB-2021-004361
db:	PACKETSTORM	id:	162341
db:	PACKETSTORM	id:	162151
db:	PACKETSTORM	id:	162246
db:	PACKETSTORM	id:	162255
db:	PACKETSTORM	id:	162528
db:	PACKETSTORM	id:	162117
db:	CNNVD	id:	CNNVD-202103-523
db:	NVD	id:	CVE-2021-27363

LAST UPDATE DATE

2025-02-20T21:25:38.045000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-386598	date:	2022-05-23T00:00:00
db:	VULMON	id:	CVE-2021-27363	date:	2022-05-23T00:00:00
db:	JVNDB	id:	JVNDB-2021-004361	date:	2021-11-18T09:07:00
db:	CNNVD	id:	CNNVD-202103-523	date:	2022-07-11T00:00:00
db:	NVD	id:	CVE-2021-27363	date:	2024-11-21T05:57:50.513

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-386598	date:	2021-03-07T00:00:00
db:	VULMON	id:	CVE-2021-27363	date:	2021-03-07T00:00:00
db:	JVNDB	id:	JVNDB-2021-004361	date:	2021-11-18T00:00:00
db:	PACKETSTORM	id:	162341	date:	2021-04-27T15:18:39
db:	PACKETSTORM	id:	162151	date:	2021-04-13T15:38:30
db:	PACKETSTORM	id:	162246	date:	2021-04-20T16:17:42
db:	PACKETSTORM	id:	162255	date:	2021-04-20T16:32:38
db:	PACKETSTORM	id:	162528	date:	2021-05-11T15:20:32
db:	PACKETSTORM	id:	162117	date:	2021-04-07T20:34:19
db:	CNNVD	id:	CNNVD-202103-523	date:	2021-03-05T00:00:00
db:	NVD	id:	CVE-2021-27363	date:	2021-03-07T04:15:13.330