Lucene search

K

RedhatCVELIST:CVE-2021-3772

HistoryMar 02, 2022 - 12:00 a.m.

CVE-2021-3772

2022-03-0200:00:00

CWE-354

redhat

www.cve.org

4

linux

sctp

blind attacker

ip addresses

spoofed packets

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

72.8%

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "kernel",
    "versions": [
      {
        "version": "Fixed in linux kernel v5.15 and above",
        "status": "affected"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=2000694

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=32f8807a48ae55be0e76880cfe8607a18b5bb0df

github.com/torvalds/linux/commit/32f8807a48ae55be0e76880cfe8607a18b5bb0df

lists.debian.org/debian-lts-announce/2022/03/msg00012.html

security.netapp.com/advisory/ntap-20221007-0001/

ubuntu.com/security/CVE-2021-3772

www.debian.org/security/2022/dsa-5096

www.oracle.com/security-alerts/cpujul2022.html

AI Score

7.1

Confidence

High

EPSS

0.004

Percentile

72.8%

Related for CVELIST:CVE-2021-3772

prion1 ubuntucve1 debiancve1 cbl_mariner1 redhatcve1 osv13 veracode1 nvd1 cve1 ibm1 fedora1 openvas45 amazon4 nessus61 oraclelinux2 mageia2 ubuntu7 suse6 photon2 rocky2 slackware1 almalinux1 redhat7 debian2 oracle1