CVE-2021-43976

EPSS 0.64%
Veröffentlicht 17.11.2021 17:15:08
Zuletzt bearbeitet 21.11.2024 06:30:07
Erkennungen
Login

In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 13

NVD 18 VulnDex Vulnerability Enrichment 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 5.15.2

Fedoraproject ≫ Fedora Version 34

Fedoraproject ≫ Fedora Version 35

Debian ≫ Debian Linux Version 9.0

Debian ≫ Debian Linux Version 10.0

Debian ≫ Debian Linux Version 11.0

Netapp ≫ Cloud Backup Version -

Netapp ≫ H300s Firmware Version -

Netapp ≫ H300s Version -

Netapp ≫ H500s Firmware Version -

Netapp ≫ H500s Version -

Netapp ≫ H700s Firmware Version -

Netapp ≫ H700s Version -

Netapp ≫ H300e Firmware Version -

Netapp ≫ H300e Version -

Netapp ≫ H500e Firmware Version -

Netapp ≫ H500e Version -

Netapp ≫ H700e Firmware Version -

Netapp ≫ H700e Version -

Netapp ≫ H410s Firmware Version -

Netapp ≫ H410s Version -

Netapp ≫ H410c Firmware Version -

Netapp ≫ H410c Version -

Oracle ≫ Communications Cloud Native Core Binding Support Function Version 22.1.3

Oracle ≫ Communications Cloud Native Core Network Exposure Function Version 22.1.1

Oracle ≫ Communications Cloud Native Core Policy Version 22.2.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.64%	0.463

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.6	0.9	3.6	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:N/I:N/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://www.oracle.com/security-alerts/cpujul2022.html

Patch

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html

Third Party Advisory

Mailing List

https://www.debian.org/security/2022/dsa-5096

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YODMYMGZYDXQKGJGX7TJG4XV4L5YLLBD/

https://security.netapp.com/advisory/ntap-20211210-0001/

Third Party Advisory

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04d80663f67ccef893061b49ec8a42ff7045ae84

https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html

Third Party Advisory

Mailing List

https://patchwork.kernel.org/project/linux-wireless/patch/YX4CqjfRcTa6bVL+%40Zekuns-MBP-16.fios-router.home/

https://www.debian.org/security/2022/dsa-5092

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-43976

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-43976

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-43976

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-43976