7.1
CVE-2021-3501
- EPSS 0.37%
- Veröffentlicht 06.05.2021 13:15:12
- Zuletzt bearbeitet 05.08.2026 22:17:05
- Erkennungen
A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.12
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux For Real Time Version 8
Redhat ≫ Enterprise Linux For Real Time For Nfv Version 8
Redhat ≫ Enterprise Linux For Real Time For Nfv Tus Version 8.4
Redhat ≫ Enterprise Linux For Real Time Tus Version 8.4
Fedoraproject ≫ Fedora Version 33
Redhat ≫ Virtualization Version 4.0
Redhat ≫ Virtualization Host Version 4.0
Netapp ≫ Cloud Backup Version -
Netapp ≫ H300s Firmware Version -
Netapp ≫ H500s Firmware Version -
Netapp ≫ H700s Firmware Version -
Netapp ≫ H300e Firmware Version -
Netapp ≫ H500e Firmware Version -
Netapp ≫ H700e Firmware Version -
Netapp ≫ H410s Firmware Version -
Netapp ≫ H410c Firmware Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.29 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
| NIST | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:P
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://bugzilla.redhat.com/show_bug.cgi?id=1950136
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c4f2ee3f68c9a4bf1653d15f1a9a435ae33f7a
https://security.netapp.com/advisory/ntap-20210618-0008/