CVE-2021-20322 - 漏洞详情

CVE-2021-20322 (CNNVD-202111-2081)

HIGH

中文标题:

Linux kernel 安全特征问题漏洞

英文标题:

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Lin...

CVSS分数: 7.4

发布时间: 2022-02-18 17:50:45

漏洞类型: 授权问题

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，攻击者可利用该漏洞可以绕过对Linux内核数据的访问限制，通过ICMP错误开放UDP端口，以读取敏感信息。

英文描述:

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

CWE类型:

CWE-330

受影响产品

厂商	产品	版本	版本范围	平台	CPE
linux	linux_kernel	*	-	-	`cpe:2.3:o:linux:linux_kernel::::::::`
fedoraproject	fedora	34	-	-	`cpe:2.3:o:fedoraproject:fedora:34:::::::*`
debian	debian_linux	9.0	-	-	`cpe:2.3:o:debian:debian_linux:9.0:::::::*`
debian	debian_linux	10.0	-	-	`cpe:2.3:o:debian:debian_linux:10.0:::::::*`
netapp	active_iq_unified_manager	-	-	-	`cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vmware_vsphere::`
netapp	e-series_santricity_os_controller	*	-	-	`cpe:2.3:a:netapp:e-series_santricity_os_controller::::::::`
netapp	solidfire\,_enterprise_sds_\&_hci_storage_node	-	-	-	`cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:::::::*`
netapp	solidfire_\&_hci_management_node	-	-	-	`cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:::::::*`
netapp	fas_baseboard_management_controller_firmware	-	-	-	`cpe:2.3:o:netapp:fas_baseboard_management_controller_firmware:-:::::::*`
netapp	aff_baseboard_management_controller_firmware	-	-	-	`cpe:2.3:o:netapp:aff_baseboard_management_controller_firmware:-:::::::*`
netapp	aff_a700s_firmware	-	-	-	`cpe:2.3:o:netapp:aff_a700s_firmware:-:::::::*`
netapp	h700s_firmware	-	-	-	`cpe:2.3:o:netapp:h700s_firmware:-:::::::*`
netapp	h700e_firmware	-	-	-	`cpe:2.3:o:netapp:h700e_firmware:-:::::::*`
netapp	h500s_firmware	-	-	-	`cpe:2.3:o:netapp:h500s_firmware:-:::::::*`
netapp	h410s_firmware	-	-	-	`cpe:2.3:o:netapp:h410s_firmware:-:::::::*`
netapp	h500e_firmware	-	-	-	`cpe:2.3:o:netapp:h500e_firmware:-:::::::*`
netapp	h300e_firmware	-	-	-	`cpe:2.3:o:netapp:h300e_firmware:-:::::::*`
netapp	h300s_firmware	-	-	-	`cpe:2.3:o:netapp:h300s_firmware:-:::::::*`
netapp	hci_compute_node_firmware	-	-	-	`cpe:2.3:o:netapp:hci_compute_node_firmware:-:::::::*`
oracle	communications_cloud_native_core_binding_support_function	22.1.3	-	-	`cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:::::::*`
oracle	communications_cloud_native_core_network_exposure_function	22.1.1	-	-	`cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:::::::*`
oracle	communications_cloud_native_core_policy	22.2.0	-	-	`cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）