Details of VAR-202107-1361

ID

VAR-202107-1361

CVE

CVE-2021-33909

TITLE

Linux Kernel Classic buffer overflow vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2021-012742

DESCRIPTION

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05. Linux Kernel Exists in a classic buffer overflow vulnerability. Vendor exploits this vulnerability CID-8cae8cd89f05 It is published as.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. 8.2) - aarch64, ppc64le, x86_64 Red Hat Enterprise Linux BaseOS EUS (v. 8.2) - aarch64, noarch, ppc64le, s390x, x86_64 3. Bug Fix(es): * RHEL8.2 Snapshot2 - tpm: ibmvtpm: Wait for buffer to be set before proceeding (BZ#1933986) * fnic crash from invalid request pointer (BZ#1961707) * [Azure][RHEL8.4] Two Patches Needed To Enable Azure Host Time-syncing in VMs (BZ#1963051) * RHEL kernel 8.2 and higher are affected by data corruption bug in raid1 arrays using bitmaps. (BZ#1969338) 4. ========================================================================= Ubuntu Security Notice USN-5015-1 July 20, 2021 linux-oem-5.10 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-oem-5.10: Linux kernel for OEM systems Details: It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-33909) Michael Brown discovered that the Xen netback driver in the Linux kernel did not properly handle malformed packets from a network PV frontend, leading to a use-after-free vulnerability. An attacker in a guest VM could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-28691) It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device initialization failure, leading to a double-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-3564) It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device detach events, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-3573) It was discovered that the NFC implementation in the Linux kernel did not properly handle failed connect events leading to a NULL pointer dereference. A local attacker could use this to cause a denial of service. (CVE-2021-3587) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: linux-image-5.10.0-1038-oem 5.10.0-1038.40 linux-image-oem-20.04 5.10.0.1038.40 linux-image-oem-20.04b 5.10.0.1038.40 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. 7.7) - ppc64le, x86_64 3. Description: This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. These packages include redhat-release-virtualization-host. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: OpenShift Container Platform 4.7.21 security and bug fix update Advisory ID: RHSA-2021:2763-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2021:2763 Issue date: 2021-07-26 CVE Names: CVE-2021-33909 CVE-2021-33910 ===================================================================== 1. Summary: An update is now available for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenShift Container Platform 4.7 - noarch, ppc64le, s390x, x86_64 3. Description: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. The kernel packages contain the Linux kernel, the core of any Linux operating system. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Ansible is a SSH-based configuration management, deployment, and task execution system. The openshift-ansible packages contain Ansible code and playbooks for installing and upgrading OpenShift Container Platform 3. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit. Security Fix(es): * kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909) * systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash (CVE-2021-33910) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel-rt: update RT source tree to the RHEL-8.3.z source tree (BZ#1957359) * Placeholder bug for OCP 4.7.0 rpm release (BZ#1983534) 4. Solution: For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-rel ease-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster - -cli.html The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1970273 - CVE-2021-33909 kernel: size_t-to-int conversion vulnerability in the filesystem layer 1970887 - CVE-2021-33910 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash 1983534 - Placeholder bug for OCP 4.7.0 rpm release 6. Package List: Red Hat OpenShift Container Platform 4.7: Source: cri-o-1.20.4-4.rhaos4.7.gitf7276ed.el7.src.rpm openshift-4.7.0-202107132131.p0.git.558d959.assembly.stream.el7.src.rpm openshift-ansible-4.7.0-202107070256.p0.git.e1b19c2.assembly.stream.el7.src.rpm openshift-clients-4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el7.src.rpm noarch: openshift-ansible-4.7.0-202107070256.p0.git.e1b19c2.assembly.stream.el7.noarch.rpm openshift-ansible-test-4.7.0-202107070256.p0.git.e1b19c2.assembly.stream.el7.noarch.rpm x86_64: cri-o-1.20.4-4.rhaos4.7.gitf7276ed.el7.x86_64.rpm cri-o-debuginfo-1.20.4-4.rhaos4.7.gitf7276ed.el7.x86_64.rpm openshift-clients-4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el7.x86_64.rpm openshift-clients-redistributable-4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el7.x86_64.rpm openshift-hyperkube-4.7.0-202107132131.p0.git.558d959.assembly.stream.el7.x86_64.rpm Red Hat OpenShift Container Platform 4.7: Source: atomic-openshift-service-idler-4.7.0-202107070256.p0.git.39cfc66.assembly.stream.el8.src.rpm cri-o-1.20.4-4.rhaos4.7.gitf7276ed.el8.src.rpm kernel-4.18.0-240.23.2.el8_3.src.rpm kernel-rt-4.18.0-240.23.2.rt7.79.el8_3.src.rpm openshift-4.7.0-202107132131.p0.git.558d959.assembly.stream.el8.src.rpm openshift-clients-4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8.src.rpm openshift-kuryr-4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8.src.rpm systemd-239-41.el8_3.3.src.rpm noarch: kernel-abi-whitelists-4.18.0-240.23.2.el8_3.noarch.rpm kernel-doc-4.18.0-240.23.2.el8_3.noarch.rpm openshift-kuryr-cni-4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8.noarch.rpm openshift-kuryr-common-4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8.noarch.rpm openshift-kuryr-controller-4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8.noarch.rpm python3-kuryr-kubernetes-4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8.noarch.rpm ppc64le: atomic-openshift-service-idler-4.7.0-202107070256.p0.git.39cfc66.assembly.stream.el8.ppc64le.rpm bpftool-4.18.0-240.23.2.el8_3.ppc64le.rpm bpftool-debuginfo-4.18.0-240.23.2.el8_3.ppc64le.rpm cri-o-1.20.4-4.rhaos4.7.gitf7276ed.el8.ppc64le.rpm cri-o-debuginfo-1.20.4-4.rhaos4.7.gitf7276ed.el8.ppc64le.rpm cri-o-debugsource-1.20.4-4.rhaos4.7.gitf7276ed.el8.ppc64le.rpm kernel-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-core-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-cross-headers-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debug-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debug-core-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debug-debuginfo-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debug-devel-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debug-modules-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debug-modules-extra-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debug-modules-internal-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debuginfo-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-devel-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-headers-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-ipaclones-internal-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-modules-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-modules-extra-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-modules-internal-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-selftests-internal-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-tools-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-tools-debuginfo-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-tools-libs-4.18.0-240.23.2.el8_3.ppc64le.rpm kernel-tools-libs-devel-4.18.0-240.23.2.el8_3.ppc64le.rpm openshift-clients-4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8.ppc64le.rpm openshift-hyperkube-4.7.0-202107132131.p0.git.558d959.assembly.stream.el8.ppc64le.rpm perf-4.18.0-240.23.2.el8_3.ppc64le.rpm perf-debuginfo-4.18.0-240.23.2.el8_3.ppc64le.rpm python3-perf-4.18.0-240.23.2.el8_3.ppc64le.rpm python3-perf-debuginfo-4.18.0-240.23.2.el8_3.ppc64le.rpm s390x: atomic-openshift-service-idler-4.7.0-202107070256.p0.git.39cfc66.assembly.stream.el8.s390x.rpm bpftool-4.18.0-240.23.2.el8_3.s390x.rpm bpftool-debuginfo-4.18.0-240.23.2.el8_3.s390x.rpm cri-o-1.20.4-4.rhaos4.7.gitf7276ed.el8.s390x.rpm cri-o-debuginfo-1.20.4-4.rhaos4.7.gitf7276ed.el8.s390x.rpm cri-o-debugsource-1.20.4-4.rhaos4.7.gitf7276ed.el8.s390x.rpm kernel-4.18.0-240.23.2.el8_3.s390x.rpm kernel-core-4.18.0-240.23.2.el8_3.s390x.rpm kernel-cross-headers-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debug-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debug-core-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debug-debuginfo-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debug-devel-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debug-modules-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debug-modules-extra-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debug-modules-internal-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debuginfo-4.18.0-240.23.2.el8_3.s390x.rpm kernel-debuginfo-common-s390x-4.18.0-240.23.2.el8_3.s390x.rpm kernel-devel-4.18.0-240.23.2.el8_3.s390x.rpm kernel-headers-4.18.0-240.23.2.el8_3.s390x.rpm kernel-modules-4.18.0-240.23.2.el8_3.s390x.rpm kernel-modules-extra-4.18.0-240.23.2.el8_3.s390x.rpm kernel-modules-internal-4.18.0-240.23.2.el8_3.s390x.rpm kernel-selftests-internal-4.18.0-240.23.2.el8_3.s390x.rpm kernel-tools-4.18.0-240.23.2.el8_3.s390x.rpm kernel-tools-debuginfo-4.18.0-240.23.2.el8_3.s390x.rpm kernel-zfcpdump-4.18.0-240.23.2.el8_3.s390x.rpm kernel-zfcpdump-core-4.18.0-240.23.2.el8_3.s390x.rpm kernel-zfcpdump-debuginfo-4.18.0-240.23.2.el8_3.s390x.rpm kernel-zfcpdump-devel-4.18.0-240.23.2.el8_3.s390x.rpm kernel-zfcpdump-modules-4.18.0-240.23.2.el8_3.s390x.rpm kernel-zfcpdump-modules-extra-4.18.0-240.23.2.el8_3.s390x.rpm kernel-zfcpdump-modules-internal-4.18.0-240.23.2.el8_3.s390x.rpm openshift-clients-4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8.s390x.rpm openshift-hyperkube-4.7.0-202107132131.p0.git.558d959.assembly.stream.el8.s390x.rpm perf-4.18.0-240.23.2.el8_3.s390x.rpm perf-debuginfo-4.18.0-240.23.2.el8_3.s390x.rpm python3-perf-4.18.0-240.23.2.el8_3.s390x.rpm python3-perf-debuginfo-4.18.0-240.23.2.el8_3.s390x.rpm x86_64: atomic-openshift-service-idler-4.7.0-202107070256.p0.git.39cfc66.assembly.stream.el8.x86_64.rpm bpftool-4.18.0-240.23.2.el8_3.x86_64.rpm bpftool-debuginfo-4.18.0-240.23.2.el8_3.x86_64.rpm cri-o-1.20.4-4.rhaos4.7.gitf7276ed.el8.x86_64.rpm cri-o-debuginfo-1.20.4-4.rhaos4.7.gitf7276ed.el8.x86_64.rpm cri-o-debugsource-1.20.4-4.rhaos4.7.gitf7276ed.el8.x86_64.rpm kernel-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-core-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-cross-headers-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debug-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debug-core-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debug-debuginfo-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debug-devel-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debug-modules-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debug-modules-extra-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debug-modules-internal-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debuginfo-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-devel-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-headers-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-ipaclones-internal-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-modules-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-modules-extra-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-modules-internal-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-rt-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-core-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debug-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debug-core-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debug-debuginfo-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debug-devel-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debug-kvm-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debug-modules-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debug-modules-extra-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debug-modules-internal-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debuginfo-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-debuginfo-common-x86_64-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-devel-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-kvm-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-modules-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-modules-extra-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-modules-internal-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-rt-selftests-internal-4.18.0-240.23.2.rt7.79.el8_3.x86_64.rpm kernel-selftests-internal-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-tools-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-tools-debuginfo-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-tools-libs-4.18.0-240.23.2.el8_3.x86_64.rpm kernel-tools-libs-devel-4.18.0-240.23.2.el8_3.x86_64.rpm openshift-clients-4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8.x86_64.rpm openshift-clients-redistributable-4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8.x86_64.rpm openshift-hyperkube-4.7.0-202107132131.p0.git.558d959.assembly.stream.el8.x86_64.rpm perf-4.18.0-240.23.2.el8_3.x86_64.rpm perf-debuginfo-4.18.0-240.23.2.el8_3.x86_64.rpm python3-perf-4.18.0-240.23.2.el8_3.x86_64.rpm python3-perf-debuginfo-4.18.0-240.23.2.el8_3.x86_64.rpm systemd-239-41.el8_3.3.x86_64.rpm systemd-container-239-41.el8_3.3.x86_64.rpm systemd-container-debuginfo-239-41.el8_3.3.x86_64.rpm systemd-debuginfo-239-41.el8_3.3.x86_64.rpm systemd-debugsource-239-41.el8_3.3.x86_64.rpm systemd-devel-239-41.el8_3.3.x86_64.rpm systemd-journal-remote-239-41.el8_3.3.x86_64.rpm systemd-journal-remote-debuginfo-239-41.el8_3.3.x86_64.rpm systemd-libs-239-41.el8_3.3.x86_64.rpm systemd-libs-debuginfo-239-41.el8_3.3.x86_64.rpm systemd-pam-239-41.el8_3.3.x86_64.rpm systemd-pam-debuginfo-239-41.el8_3.3.x86_64.rpm systemd-tests-239-41.el8_3.3.x86_64.rpm systemd-tests-debuginfo-239-41.el8_3.3.x86_64.rpm systemd-udev-239-41.el8_3.3.x86_64.rpm systemd-udev-debuginfo-239-41.el8_3.3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-33909 https://access.redhat.com/security/cve/CVE-2021-33910 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/security/vulnerabilities/RHSB-2021-006 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYP7mF9zjgjWX9erEAQgZ9w//YYzC2fpVCACER7JZoIPkj5kgKpNZb2dl rAWgr+4jY5kTvZWF189Xbte1l82nWPYNhsC159NvlhevkFvNXvq5sCNrjn/5c9r7 4Kcxfoxssz2XS8k5QeOgm1eNaIyRbvO0N2GPJu5hFXqZJgC9Pd1a4aKGECRNT55d hiAbsYgB5BgbC/Zoz1p50p4t8oIQtaurNizNF/gk97WqcLaRHRN3JgxXv5Q7qn0W 6kxA5Vj7MYUnVR18h+GQv9BFxhOGW0E6JWsNXOpRuyyy2ZIDiRcaXL67luB2n24O H6Sc4nOxV4wEZ/0gWfb5YjRdwVdxQXwxa9hegiWX+CeApLUrsvZy0W0Ca/Bc7pbv B+FuHJZMjrAy7ORnILkkSGh1jHO5D3m22SWs3+mokJnUAl9CMFj/l9xbZEli0Nga bxbJg1TSQg30PGc1DQOdeM7i9dNHJGiJw1b89rP/R3W+9eUjtZTdaeD/irwbFTP0 KYCl+KmjnjWayXP+ZfdW0fWwBo1rl5o6bjTai1ztfjZALXaYQpCEyhvZsLbzL+j9 PIRUvwT3TXk0014tPyweLQLRwpOTPFhAro3hgzsLUKFpQhB2vhbR0U8yu/SGRS3z x4SzHQhYcU24UTJxMLUXdRQjniJbRZsyaCpUM0FvSVxzzhpwMiOAR9IZhvOOW5mo aRtMwhGvgzU= =dqQ0 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . (CVE-2021-3653) Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. If you are running a kernel version earlier than the one listed below, please upgrade your kernel as soon as possible. Ubuntu 20.04 LTS linux-aws - 5.4.0-1009 linux-azure - 5.4.0-1010 linux-gcp - 5.4.0-1009 linux-gke - 5.4.0-1033 linux-gkeop - 5.4.0-1009 linux-oem - 5.4.0-26 linux - 5.4.0-26 Ubuntu 18.04 LTS linux-aws - 4.15.0-1054 linux-gke-4.15 - 4.15.0-1076 linux-gke-5.4 - 5.4.0-1009 linux-gkeop-5.4 - 5.4.0-1007 linux-hwe-5.4 - 5.4.0-26 linux-oem - 4.15.0-1063 linux - 4.15.0-69 Ubuntu 16.04 ESM linux-aws - 4.4.0-1098 linux-azure - 4.15.0-1063 linux-azure - 4.15.0-1078 linux-hwe - 4.15.0-69 linux - 4.4.0-168 linux - 4.4.0-211 Ubuntu 14.04 ESM linux-lts-xenial - 4.4.0-168 References - CVE-2021-3653 - CVE-2021-3656 - CVE-2021-22555 - CVE-2021-33909 -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Trust: 2.43

sources: NVD: CVE-2021-33909 // JVNDB: JVNDB-2021-012742 // VULMON: CVE-2021-33909 // PACKETSTORM: 163589 // PACKETSTORM: 163596 // PACKETSTORM: 163598 // PACKETSTORM: 163605 // PACKETSTORM: 163619 // PACKETSTORM: 163671 // PACKETSTORM: 163682 // PACKETSTORM: 164155

AFFECTED PRODUCTS

vendor:	linux	model:	kernel	scope:	gte	version:	4.20	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.5	Trust: 1.0
vendor:	oracle	model:	communications session border controller	scope:	eq	version:	9.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	4.5	Trust: 1.0
vendor:	fedoraproject	model:	fedora	scope:	eq	version:	34	Trust: 1.0
vendor:	netapp	model:	solidfire	scope:	eq	version:	-	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.16	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	4.10	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	9.0	Trust: 1.0
vendor:	oracle	model:	communications session border controller	scope:	eq	version:	8.4	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	3.12.43	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	4.9.276	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	4.14.240	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.4.134	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.11	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.13	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.12.19	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.13.4	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	4.4.276	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	4.15	Trust: 1.0
vendor:	netapp	model:	hci management node	scope:	eq	version:	-	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	10.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	3.13	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.10.52	Trust: 1.0
vendor:	oracle	model:	communications session border controller	scope:	eq	version:	8.3	Trust: 1.0
vendor:	oracle	model:	communications session border controller	scope:	eq	version:	8.2	Trust: 1.0
vendor:	sonicwall	model:	sma1000	scope:	lte	version:	12.4.2-02044	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	4.19.198	Trust: 1.0
vendor:	日立	model:	rv3000	scope:	-	version:	-	Trust: 0.8
vendor:	linux	model:	kernel	scope:	-	version:	-	Trust: 0.8
vendor:	netapp	model:	hci management node	scope:	-	version:	-	Trust: 0.8
vendor:	fedora	model:	fedora	scope:	-	version:	-	Trust: 0.8
vendor:	netapp	model:	solidfire	scope:	-	version:	-	Trust: 0.8
vendor:	オラクル	model:	oracle communications session border controller	scope:	-	version:	-	Trust: 0.8
vendor:	日立	model:	ha8000v シリーズ	scope:	-	version:	-	Trust: 0.8
vendor:	debian	model:	gnu/linux	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-012742 // NVD: CVE-2021-33909

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-33909
value:	HIGH
Trust: 1.0
NVD:	CVE-2021-33909
value:	HIGH
Trust: 0.8
VULMON:	CVE-2021-33909
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2021-33909
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9

nvd@nist.gov:	CVE-2021-33909
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2021-33909
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULMON: CVE-2021-33909 // JVNDB: JVNDB-2021-012742 // NVD: CVE-2021-33909

PROBLEMTYPE DATA

problemtype:	CWE-787	Trust: 1.0
problemtype:	CWE-190	Trust: 1.0
problemtype:	Classic buffer overflow (CWE-120) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-012742 // NVD: CVE-2021-33909

THREAT TYPE

local

Trust: 0.3

sources: PACKETSTORM: 163596 // PACKETSTORM: 163598 // PACKETSTORM: 163671

TYPE

arbitrary

Trust: 0.3

sources: PACKETSTORM: 163596 // PACKETSTORM: 163598 // PACKETSTORM: 163671

PATCH

title:	Oracle Critical Patch Update Advisory - January 2022 Hitachi Server / Client Product Security Information	url:	https://lists.debian.org/debian-lts-announce/2021/07/msg00014.html	Trust: 0.8
title:	Amazon Linux AMI: ALAS-2021-1524	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2021-1524	Trust: 0.1
title:	Debian Security Advisories: DSA-4941-1 linux -- security update	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=fb9b5f5cc430f484f4420a11b7b87136	Trust: 0.1
title:	Amazon Linux 2: ALAS2LIVEPATCH-2021-055	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2LIVEPATCH-2021-055	Trust: 0.1
title:	Amazon Linux 2: ALAS2KERNEL-5.10-2022-003	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2KERNEL-5.10-2022-003	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2021-1691	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2021-1691	Trust: 0.1
title:	Amazon Linux 2: ALAS2LIVEPATCH-2021-057	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2LIVEPATCH-2021-057	Trust: 0.1
title:	Amazon Linux 2: ALAS2LIVEPATCH-2021-056	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2LIVEPATCH-2021-056	Trust: 0.1
title:	Arch Linux Advisories: [ASA-202107-48] linux: privilege escalation	url:	https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories&qid=ASA-202107-48	Trust: 0.1
title:	Arch Linux Advisories: [ASA-202107-50] linux-hardened: privilege escalation	url:	https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories&qid=ASA-202107-50	Trust: 0.1
title:	Amazon Linux 2: ALAS2KERNEL-5.4-2022-005	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2KERNEL-5.4-2022-005	Trust: 0.1
title:	Amazon Linux 2: ALAS2LIVEPATCH-2021-058	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2LIVEPATCH-2021-058	Trust: 0.1
title:	Amazon Linux 2: ALAS2LIVEPATCH-2021-059	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2LIVEPATCH-2021-059	Trust: 0.1
title:	Arch Linux Advisories: [ASA-202107-49] linux-zen: privilege escalation	url:	https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories&qid=ASA-202107-49	Trust: 0.1
title:	Arch Linux Advisories: [ASA-202107-51] linux-lts: privilege escalation	url:	https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories&qid=ASA-202107-51	Trust: 0.1
title:	Arch Linux Issues:	url:	https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues&qid=CVE-2021-33909 log	Trust: 0.1
title:	Siemens Security Advisories: Siemens Security Advisory	url:	https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=ec6577109e640dac19a6ddb978afe82d	Trust: 0.1
title:	LinuxVulnerabilities	url:	https://github.com/gitezri/LinuxVulnerabilities	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2021-33909	Trust: 0.1
title:	CVE-2021-33909	url:	https://github.com/AmIAHuman/CVE-2021-33909	Trust: 0.1
title:	CVE-2021-33909	url:	https://github.com/Liang2580/CVE-2021-33909	Trust: 0.1
title:	cve-2021-33909	url:	https://github.com/baerwolf/cve-2021-33909	Trust: 0.1
title:	CVE-2021-33909	url:	https://github.com/bbinfosec43/CVE-2021-33909	Trust: 0.1
title:	deep-directory	url:	https://github.com/sfowl/deep-directory	Trust: 0.1
title:	integer_compilation_flags	url:	https://github.com/mdulin2/integer_compilation_flags	Trust: 0.1
title:	CVE-2021-33909	url:	https://github.com/AlAIAL90/CVE-2021-33909	Trust: 0.1
title:	CVE-2021-33909	url:	https://github.com/ChrisTheCoolHut/CVE-2021-33909	Trust: 0.1
title:	-	url:	https://github.com/knewbury01/codeql-workshop-integer-conversion	Trust: 0.1
title:	kickstart-rhel8	url:	https://github.com/alexhaydock/kickstart-rhel8	Trust: 0.1
title:	exploit_articles	url:	https://github.com/ChoKyuWon/exploit_articles	Trust: 0.1
title:	-	url:	https://github.com/hardenedvault/ved	Trust: 0.1
title:	SVG-advisories	url:	https://github.com/EGI-Federation/SVG-advisories	Trust: 0.1
title:	-	url:	https://github.com/makoto56/penetration-suite-toolkit	Trust: 0.1

sources: VULMON: CVE-2021-33909 // JVNDB: JVNDB-2021-012742

EXTERNAL IDS

db:	NVD	id:	CVE-2021-33909	Trust: 3.5
db:	PACKETSTORM	id:	163621	Trust: 1.8
db:	PACKETSTORM	id:	163671	Trust: 1.1
db:	PACKETSTORM	id:	164155	Trust: 1.1
db:	OPENWALL	id:	OSS-SECURITY/2021/09/21/1	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2021/07/20/1	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2021/08/25/10	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2021/09/17/2	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2021/07/22/7	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2021/09/17/4	Trust: 1.0
db:	PACKETSTORM	id:	165477	Trust: 1.0
db:	ICS CERT	id:	ICSA-24-074-07	Trust: 0.8
db:	JVN	id:	JVNVU93656033	Trust: 0.8
db:	JVNDB	id:	JVNDB-2021-012742	Trust: 0.8
db:	VULMON	id:	CVE-2021-33909	Trust: 0.1
db:	PACKETSTORM	id:	163589	Trust: 0.1
db:	PACKETSTORM	id:	163596	Trust: 0.1
db:	PACKETSTORM	id:	163598	Trust: 0.1
db:	PACKETSTORM	id:	163605	Trust: 0.1
db:	PACKETSTORM	id:	163619	Trust: 0.1
db:	PACKETSTORM	id:	163682	Trust: 0.1

sources: VULMON: CVE-2021-33909 // JVNDB: JVNDB-2021-012742 // PACKETSTORM: 163589 // PACKETSTORM: 163596 // PACKETSTORM: 163598 // PACKETSTORM: 163605 // PACKETSTORM: 163619 // PACKETSTORM: 163671 // PACKETSTORM: 163682 // PACKETSTORM: 164155 // NVD: CVE-2021-33909

REFERENCES

url:	http://packetstormsecurity.com/files/163621/sequoia-a-deep-root-in-linuxs-filesystem-layer.html	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2021-33909	Trust: 1.6
url:	http://packetstormsecurity.com/files/163671/kernel-live-patch-security-notice-lsn-0079-1.html	Trust: 1.0
url:	http://packetstormsecurity.com/files/164155/kernel-live-patch-security-notice-lsn-0081-1.html	Trust: 1.0
url:	http://packetstormsecurity.com/files/165477/kernel-live-patch-security-notice-lsn-0083-1.html	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2021/07/22/7	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2021/08/25/10	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2021/09/17/2	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2021/09/17/4	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2021/09/21/1	Trust: 1.0
url:	https://cdn.kernel.org/pub/linux/kernel/v5.x/changelog-5.13.4	Trust: 1.0
url:	https://github.com/torvalds/linux/commit/8cae8cd89f05f6de223d63e6d15e31c8ba9cf53b	Trust: 1.0
url:	https://lists.debian.org/debian-lts-announce/2021/07/msg00014.html	Trust: 1.0
url:	https://lists.debian.org/debian-lts-announce/2021/07/msg00015.html	Trust: 1.0
url:	https://lists.debian.org/debian-lts-announce/2021/07/msg00016.html	Trust: 1.0
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/z4uhhigiso3fvrf4cqnjs4ika25atsfu/	Trust: 1.0
url:	https://psirt.global.sonicwall.com/vuln-detail/snwlid-2022-0015	Trust: 1.0
url:	https://security.netapp.com/advisory/ntap-20210819-0004/	Trust: 1.0
url:	https://www.debian.org/security/2021/dsa-4941	Trust: 1.0
url:	https://www.openwall.com/lists/oss-security/2021/07/20/1	Trust: 1.0
url:	https://www.oracle.com/security-alerts/cpujan2022.html	Trust: 1.0
url:	https://jvn.jp/vu/jvnvu93656033/index.html	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-07	Trust: 0.8
url:	https://listman.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2021-33909	Trust: 0.4
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.4
url:	https://access.redhat.com/security/team/key/	Trust: 0.4
url:	https://access.redhat.com/security/vulnerabilities/rhsb-2021-006	Trust: 0.4
url:	https://bugzilla.redhat.com/):	Trust: 0.4
url:	https://access.redhat.com/security/team/contact/	Trust: 0.4
url:	https://nvd.nist.gov/vuln/detail/cve-2021-33034	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2021-33034	Trust: 0.3
url:	https://access.redhat.com/articles/11258	Trust: 0.2
url:	https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2020-35508	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-25704	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:2718	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-26541	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-35508	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-26541	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-25704	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3564	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-oem-5.10/5.10.0-1038.40	Trust: 0.1
url:	https://ubuntu.com/security/notices/usn-5015-1	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3573	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3587	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-28691	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gkeop/5.4.0-1021.22	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-26558	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gcp-5.4/5.4.0-1049.53~18.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gcp/5.4.0-1049.53	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-oracle-5.4/5.4.0-1052.56~18.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1041.45	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-kvm/5.4.0-1044.46	Trust: 0.1
url:	https://ubuntu.com/security/notices/usn-5017-1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gke-5.4/5.4.0-1049.52~18.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-hwe-5.4/5.4.0-80.90~18.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-aws-5.4/5.4.0-1054.57~18.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-azure/5.4.0-1055.57	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-oracle/5.4.0-1052.56	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gke/5.4.0-1049.52	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-azure-5.4/5.4.0-1055.57~18.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-aws/5.4.0-1054.57	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux/5.4.0-80.90	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-gkeop-5.4/5.4.0-1021.22~18.04.1	Trust: 0.1
url:	https://launchpad.net/ubuntu/+source/linux-raspi-5.4/5.4.0-1041.45~18.04.1	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:2729	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:2737	Trust: 0.1
url:	https://access.redhat.com/articles/2974891	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3600	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-33910	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-33910	Trust: 0.1
url:	https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-rel	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2021:2763	Trust: 0.1
url:	https://docs.openshift.com/container-platform/4.7/updating/updating-cluster	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-22555	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3653	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3656	Trust: 0.1

sources: JVNDB: JVNDB-2021-012742 // PACKETSTORM: 163589 // PACKETSTORM: 163596 // PACKETSTORM: 163598 // PACKETSTORM: 163605 // PACKETSTORM: 163619 // PACKETSTORM: 163671 // PACKETSTORM: 163682 // PACKETSTORM: 164155 // NVD: CVE-2021-33909

CREDITS

Red Hat

Trust: 0.4

sources: PACKETSTORM: 163589 // PACKETSTORM: 163605 // PACKETSTORM: 163619 // PACKETSTORM: 163682

SOURCES

db:	VULMON	id:	CVE-2021-33909
db:	JVNDB	id:	JVNDB-2021-012742
db:	PACKETSTORM	id:	163589
db:	PACKETSTORM	id:	163596
db:	PACKETSTORM	id:	163598
db:	PACKETSTORM	id:	163605
db:	PACKETSTORM	id:	163619
db:	PACKETSTORM	id:	163671
db:	PACKETSTORM	id:	163682
db:	PACKETSTORM	id:	164155
db:	NVD	id:	CVE-2021-33909

LAST UPDATE DATE

2024-11-20T19:38:09.106000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2021-33909	date:	2023-11-07T00:00:00
db:	JVNDB	id:	JVNDB-2021-012742	date:	2024-03-22T08:47:00
db:	NVD	id:	CVE-2021-33909	date:	2023-11-07T03:35:56.050

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2021-33909	date:	2021-07-20T00:00:00
db:	JVNDB	id:	JVNDB-2021-012742	date:	2022-09-08T00:00:00
db:	PACKETSTORM	id:	163589	date:	2021-07-21T16:03:31
db:	PACKETSTORM	id:	163596	date:	2021-07-21T16:04:22
db:	PACKETSTORM	id:	163598	date:	2021-07-21T16:04:36
db:	PACKETSTORM	id:	163605	date:	2021-07-21T16:05:28
db:	PACKETSTORM	id:	163619	date:	2021-07-21T16:07:24
db:	PACKETSTORM	id:	163671	date:	2021-07-26T15:52:13
db:	PACKETSTORM	id:	163682	date:	2021-07-27T14:47:55
db:	PACKETSTORM	id:	164155	date:	2021-09-14T16:28:49
db:	NVD	id:	CVE-2021-33909	date:	2021-07-20T19:15:09.747