Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2021-33200
HistoryMay 27, 2021 - 12:00 a.m.

CVE-2021-33200

2021-05-2700:00:00
ubuntu.com
ubuntu.com
35

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

JSON

kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect
limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be
abused to perform out-of-bounds reads and writes in kernel memory, leading
to local privilege escalation to root. In particular, there is a corner
case where the off reg causes a masking direction change, which then
results in an incorrect final aux->alu_limit.

OSVersionArchitecturePackageVersionFilename
ubuntu21.04noarchlinux< 5.11.0-22.23UNKNOWN
ubuntu21.04noarchlinux-aws< 5.11.0-1011.11UNKNOWN
ubuntu21.04noarchlinux-azure< 5.11.0-1009.9UNKNOWN
ubuntu21.04noarchlinux-gcp< 5.11.0-1011.12UNKNOWN
ubuntu21.04noarchlinux-kvm< 5.11.0-1009.9UNKNOWN
ubuntu21.04noarchlinux-oracle< 5.11.0-1010.10UNKNOWN
ubuntu21.04noarchlinux-raspi< 5.11.0-1012.13UNKNOWN
ubuntu21.04noarchlinux-riscv< 5.11.0-1012.12UNKNOWN

Related

debiancve 1
cvelist 1
veracode 1
amazon 2
fedora 2
cbl_mariner 2
f5 1
openvas 34
mageia 2
redhatcve 1
prion 1
nessus 47
nvd 1
cve 1
osv 6
ubuntu 7
suse 5
cloudfoundry 1
oraclelinux 1
almalinux 1
redhat 4
debiancve
debiancve
CVE-2021-33200
2021-05-27 13:15:08
cvelist
cvelist
CVE-2021-33200
2021-05-27 00:00:00
veracode
veracode
Privilege Escalation
2021-08-12 15:38:15
amazon
amazon
Medium: kernel
2021-07-01 01:00:00
Medium: kernel
2021-07-08 18:38:00
fedora
fedora
[SECURITY] Fedora 34 Update: kernel-5.12.8-300.fc34
2021-06-01 01:04:43
[SECURITY] Fedora 33 Update: kernel-5.12.8-200.fc33
2021-06-01 01:06:10
cbl_mariner
cbl_mariner
CVE-2021-33200 affecting package kernel for versions less than 5.10.78.1-1
2022-04-09 06:52:47
CVE-2021-33200 affecting package kernel 5.10.167.1-1
2021-09-09 15:03:26
f5
f5
K70992015 : Linux kernel vulnerabilty CVE-2021-33200
2022-05-10 00:00:00
openvas
openvas
Fedora: Security Advisory for kernel (FEDORA-2021-0b35886add)
2021-06-03 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2021-646098b5b8)
2021-06-03 00:00:00
Mageia: Security Advisory (MGASA-2021-0225)
2022-01-28 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerability
2021-05-31 23:31:00
Updated kernel packages fix security vulnerabilities
2021-05-31 23:31:00
redhatcve
redhatcve
CVE-2021-33200
2021-05-28 00:48:23
prion
prion
Out-of-bounds
2021-05-27 13:15:00
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2021-33200)
2023-03-20 00:00:00
Amazon Linux 2 : kernel (ALAS-2021-1675)
2021-07-01 00:00:00
Amazon Linux AMI : kernel (ALAS-2021-1516)
2021-07-13 00:00:00
nvd
nvd
CVE-2021-33200
2021-05-27 13:15:08
cve
cve
CVE-2021-33200
2021-05-27 13:15:08
osv
osv
linux-oem-5.10 vulnerabilities
2021-06-03 20:43:59
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
2021-07-20 22:11:51
linux-kvm vulnerabilities
2021-06-25 19:56:40
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2021-06-03 00:00:00
Linux kernel vulnerabilities
2021-07-20 00:00:00
Linux kernel vulnerabilities
2021-06-23 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2021-07-01 00:00:00
Security update for the Linux Kernel (important)
2021-06-06 00:00:00
Security update for the Linux Kernel (important)
2021-07-21 00:00:00
cloudfoundry
cloudfoundry
USN-5000-1: Linux kernel vulnerabilities | Cloud Foundry
2021-07-08 00:00:00
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2021-11-16 00:00:00
almalinux
almalinux
Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
redhat
redhat
(RHSA-2021:4140) Moderate: kernel-rt security and bug fix update
2021-11-09 08:21:02
(RHSA-2021:4356) Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
(RHSA-2021:4627) Moderate: Openshift Logging 5.3.0 bug fix and security update
2021-11-15 12:52:28

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

JSON
Related for UB:CVE-2021-33200
debiancve1cvelist1veracode1amazon2fedora2cbl_mariner2f51openvas34mageia2redhatcve1prion1nessus47nvd1cve1osv6ubuntu7suse5cloudfoundry1oraclelinux1almalinux1redhat4