Lucene search

K
nvd[email protected]NVD:CVE-2021-33909
HistoryJul 20, 2021 - 7:15 p.m.

CVE-2021-33909

2021-07-2019:15:09
CWE-787
CWE-190
web.nvd.nist.gov
3

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

55.0%

fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

Affected configurations

NVD
Node
linuxlinux_kernelRange3.12.433.13
OR
linuxlinux_kernelRange3.164.4.276
OR
linuxlinux_kernelRange4.54.9.276
OR
linuxlinux_kernelRange4.104.14.240
OR
linuxlinux_kernelRange4.154.19.198
OR
linuxlinux_kernelRange4.205.4.134
OR
linuxlinux_kernelRange5.55.10.52
OR
linuxlinux_kernelRange5.115.12.19
OR
linuxlinux_kernelRange5.135.13.4
Node
fedoraprojectfedoraMatch34
Node
debiandebian_linuxMatch9.0
OR
debiandebian_linuxMatch10.0
Node
netapphci_management_nodeMatch-
OR
netappsolidfireMatch-
Node
oraclecommunications_session_border_controllerMatch8.2
OR
oraclecommunications_session_border_controllerMatch8.3
OR
oraclecommunications_session_border_controllerMatch8.4
OR
oraclecommunications_session_border_controllerMatch9.0
Node
sonicwallsma1000_firmwareRange12.4.2-02044
AND
sonicwallsma1000Match-

References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

55.0%