8.2

CVE-2021-47244

mptcp: Fix out of bounds when parsing TCP options

In the Linux kernel, the following vulnerability has been resolved:

mptcp: Fix out of bounds when parsing TCP options

The TCP option parser in mptcp (mptcp_get_options) could read one byte
out of bounds. When the length is 1, the execution flow gets into the
loop, reads one byte of the opcode, and if the opcode is neither
TCPOPT_EOL nor TCPOPT_NOP, it reads one more byte, which exceeds the
length of 1.

This fix is inspired by commit 9609dad263f8 ("ipv4: tcp_input: fix stack
out of bounds when parsing TCP options.").
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.6 < 5.10.46
Linux ≫ Linux Kernel Version >= 5.11 < 5.12.13
Linux ≫ Linux Kernel Version 5.13 Update rc1
Linux ≫ Linux Kernel Version 5.13 Update rc2
Linux ≫ Linux Kernel Version 5.13 Update rc3
Linux ≫ Linux Kernel Version 5.13 Update rc4
Linux ≫ Linux Kernel Version 5.13 Update rc5
Linux ≫ Linux Kernel Version 5.13 Update rc6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.71% 0.501
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/07718be265680dcf496347d475ce1a5442f55ad7
Patch
https://git.kernel.org/stable/c/73eeba71dc9932970befa009e68272a3d5ec4a58
Patch
https://git.kernel.org/stable/c/76e02b8905d0691e89e104a882f3bba7dd0f6037
Patch