CVE-2021-28660

🗓️ 17 Mar 2021 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 388 Views🌐 WEB

CVE-2021-28660: rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array

Reporter	Title	Published	Views	Family All 246
ATTACKERKB	CVE-2021-28660	17 Mar 202115:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2021-1627)	22 Apr 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-002)	2 May 202200:00	–	nessus
Tenable Nessus	Debian DLA-2610-1 : linux-4.19 security update	31 Mar 202100:00	–	nessus
Tenable Nessus	Debian DLA-2689-1 : linux - LTS security update	24 Jun 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2021-1879)	18 May 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2021-1967)	4 Jun 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2021-1971)	4 Jun 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2021-2002)	30 Jun 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2051)	1 Jul 202100:00	–	nessus

NVD

Node

linux linux_kernelRange3.12–4.4.262

linux linux_kernelRange4.5–4.9.262

linux linux_kernelRange4.10–4.14.226

linux linux_kernelRange4.15–4.19.181

linux linux_kernelRange4.20–5.4.106

linux linux_kernelRange5.5–5.10.24

linux linux_kernelRange5.11–5.11.7

Node

fedoraproject fedoraMatch33

Node

debian debian_linuxMatch9.0

Node

netapp cloud_backupMatch-

Node

netapp solidfire_baseboard_management_controller_firmwareMatch-

AND

netapp solidfire_baseboard_management_controllerMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2021/06/msg00020.html
lists	www.lists.debian.org/debian-lts-announce/2021/03/msg00035.html
openwall	www.openwall.com/lists/oss-security/2022/11/21/2
openwall	www.openwall.com/lists/oss-security/2022/11/18/1
git	www.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/
security	www.security.netapp.com/advisory/ntap-20210507-0008/

Parameter	Position	Path	Description	CWE
ssid	path	drivers/staging/rtl8188eu/os_dep/ioctl_linux.c	Kernel driver write beyond end of ssid[] array in rtw_wx_set_scan via ioctl, leading to possible overflow	CWE-787

21 Nov 2024 06:00Current

7.6High risk

Vulners AI Score7.6

CVSS 28.3

CVSS 3.18.8

EPSS0.00319

CWE-787