4.9

CVE-2021-3635

A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands.

Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.5
Linux ≫ Linux Kernel Version5.5 Updaterc1
Linux ≫ Linux Kernel Version5.5 Updaterc2
Linux ≫ Linux Kernel Version5.5 Updaterc3
Linux ≫ Linux Kernel Version5.5 Updaterc4
Linux ≫ Linux Kernel Version5.5 Updaterc5
Linux ≫ Linux Kernel Version5.5 Updaterc6
Redhat ≫ Enterprise Linux Version6.0
Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Enterprise Linux Version8.0
Fedoraproject ≫ Fedora Version34
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.15% 0.356
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://bugzilla.redhat.com/show_bug.cgi?id=1976946
Third Party Advisory
Issue Tracking