Lucene search

CVE-2021-3489

🗓️ 04 Jun 2021 02:07:15Reported by canonicalType

cve🔗 web.nvd.nist.gov👁 282 Views🌐 7 Media mentions

The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel allows an attacker to perform out-of-bounds writes, leading to arbitrary code execution

Reporter	Title	Published	Views	Family All 67
NVD	CVE-2021-3489	4 Jun 202102:15	–	nvd
Debian CVE	CVE-2021-3489	4 Jun 202102:15	–	debiancve
Cvelist	CVE-2021-3489 Linux kernel eBPF RINGBUF map oversized allocation	4 Jun 202101:40	–	cvelist
Veracode	Denial Of Service (DoS)	24 May 202109:30	–	veracode
RedhatCVE	CVE-2021-3489	11 May 202120:54	–	redhatcve
Zero Day Initiative	(Pwn2Own) Canonical Ubuntu eBPF Out-Of-Bounds Access Privilege Escalation Vulnerability	14 May 202100:00	–	zdi
F5 Networks	K32525759 : Linux kernel vulnerability CVE-2021-3489	17 Oct 202200:00	–	f5
UbuntuCve	CVE-2021-3489	11 May 202100:00	–	ubuntucve
Prion	Design/Logic Flaw	4 Jun 202102:15	–	prion
CNVD	Linux kernel buffer overflow vulnerability (CNVD-2021-54396)	16 Jul 202100:00	–	cnvd

Nvd

Node

linux linux_kernelRange5.8–5.10.37

linux linux_kernelRange5.11–5.11.21

linux linux_kernelRange5.12–5.12.4

linux linux_kernelMatch5.13-

linux linux_kernelMatch5.13rc1

linux linux_kernelMatch5.13rc2

linux linux_kernelMatch5.13rc3

Node

canonical ubuntu_linuxMatch20.04lts

canonical ubuntu_linuxMatch20.10

canonical ubuntu_linuxMatch21.04

[
  {
    "product": "Linux kernel",
    "vendor": "Linux",
    "versions": [
      {
        "lessThan": "v5.13-rc4",
        "status": "affected",
        "version": "trunk",
        "versionType": "custom"
      },
      {
        "lessThan": "v5.12.4",
        "status": "affected",
        "version": "linux-5.12.y",
        "versionType": "custom"
      },
      {
        "lessThan": "v5.11.21",
        "status": "affected",
        "version": "linux-5.11.y",
        "versionType": "custom"
      },
      {
        "lessThan": "v5.10.37",
        "status": "affected",
        "version": "linux-5.10.y",
        "versionType": "custom"
      },
      {
        "lessThan": "5.8*",
        "status": "affected",
        "version": "v5.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-590/
ubuntu	www.ubuntu.com/security/notices/USN-4950-1
openwall	www.openwall.com/lists/oss-security/2021/05/11/10
security	www.security.netapp.com/advisory/ntap-20210716-0004/
git	www.git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/
ubuntu	www.ubuntu.com/security/notices/USN-4949-1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2021 02:15Current

8.1High risk

Vulners AI Score8.1

CVSS27.2

CVSS37.8

EPSS0.001