Lucene search

[email protected]CVE-2021-38202

HistoryAug 08, 2021 - 8:15 p.m.

CVE-2021-38202

2021-08-0820:15:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2021-38202

linux kernel

denial of service

out-of-bounds read

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

75.1%

JSON

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt5.13.4
netapp:hci_bootstrap_osnetapp hci bootstrap oseq-
netapp:solidfirenetapp solidfireeq-
netapp:hci_management_nodenetapp hci management nodeeq-
netapp:element_softwarenetapp element softwareeq-

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	5.13.4
netapp:hci_bootstrap_os	netapp hci bootstrap os	eq	-
netapp:solidfire	netapp solidfire	eq	-
netapp:hci_management_node	netapp hci management node	eq	-
netapp:element_software	netapp element software	eq	-