Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2021-42252
HistoryOct 11, 2021 - 12:00 a.m.

CVE-2021-42252

2021-10-1100:00:00
ubuntu.com
ubuntu.com
25

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

An issue was discovered in aspeed_lpc_ctrl_mmap in
drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6.
Local attackers able to access the Aspeed LPC control interface could
overwrite memory in the kernel and potentially execute privileges, aka
CID-b49a0e69a7b1. This occurs because a certain comparison uses values that
are not memory sizes.

Notes

Author Note
sbeattie CONFIG_ASPEED_LPC_CTRL is only enabled on armhf platforms in Ubuntu
OSVersionArchitecturePackageVersionFilename
ubuntu21.10noarchlinux-azure< 5.13.0-1008.9UNKNOWN
ubuntu21.04noarchlinux-azure< 5.11.0-1022.23UNKNOWN
ubuntu22.04noarchlinux-azure-fde< anyUNKNOWN
ubuntu22.04noarchlinux-gkeop< anyUNKNOWN
ubuntu16.04noarchlinux-hwe< 4.15.0-162.170~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux-hwe-5.11< 5.11.0-41.45~20.04.1UNKNOWN
ubuntu20.04noarchlinux-hwe-5.13< 5.13.0-22.22~20.04.1UNKNOWN
ubuntu18.04noarchlinux-hwe-5.4< 5.4.0-90.101~18.04.1UNKNOWN
ubuntu20.04noarchlinux-raspi< 5.4.0-1046.50UNKNOWN
ubuntu21.04noarchlinux-raspi< 5.11.0-1023.25UNKNOWN
Rows per page:
1-10 of 181

Related

cve 1
cbl_mariner 2
prion 1
debiancve 1
redhatcve 1
f5 1
veracode 1
cnvd 1
osv 5
ubuntu 4
openvas 20
nessus 23
photon 4
suse 6
cve
cve
CVE-2021-42252
2021-10-11 19:15:00
cbl_mariner
cbl_mariner
CVE-2021-42252 affecting package kernel 5.10.189.1-1
2021-11-03 19:21:29
CVE-2021-42252 affecting package kernel 5.10.78.1-1
2022-04-09 06:52:47
prion
prion
Design/Logic Flaw
2021-10-11 19:15:00
debiancve
debiancve
CVE-2021-42252
2021-10-11 19:15:00
redhatcve
redhatcve
CVE-2021-42252
2021-10-12 06:49:35
f5
f5
K65280235 : Linux vulnerability CVE-2021-42252
2022-05-24 00:00:00
veracode
veracode
Privilege Escalation
2021-12-28 10:08:26
cnvd
cnvd
Linux kernel memory overwrite vulnerability
2021-10-12 00:00:00
osv
osv
linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.11, linux-kvm, linux-oracle, linux-oracle-5.11, linux-raspi vulnerabilities
2021-11-30 21:34:52
linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem-5.13, linux-oracle, linux-raspi vulnerabilities
2021-11-30 22:22:53
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
2021-11-09 03:46:54
ubuntu
ubuntu
Linux kernel vulnerabilities
2021-11-30 00:00:00
Linux kernel vulnerabilities
2021-11-30 00:00:00
Linux kernel vulnerabilities
2021-11-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5161-1)
2021-12-01 00:00:00
Ubuntu: Security Advisory (USN-5162-1)
2021-12-01 00:00:00
Ubuntu: Security Advisory (USN-5136-1)
2021-11-10 00:00:00
nessus
nessus
Photon OS 4.0: Linux PHSA-2021-4.0-0126
2021-11-12 00:00:00
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5161-1)
2021-12-01 00:00:00
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5162-1)
2021-12-01 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0316
2021-10-19 00:00:00
Important Photon OS Security Update - PHSA-2021-0126
2021-11-10 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0126
2021-11-10 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2021-11-11 00:00:00
Security update for the Linux Kernel (important)
2021-11-09 00:00:00
Security update for the Linux Kernel (important)
2021-11-08 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON
Related for UB:CVE-2021-42252
cve1cbl_mariner2prion1debiancve1redhatcve1f51veracode1cnvd1osv5ubuntu4openvas20nessus23photon4suse6