CVE-2021-20322

Published: Feb 18, 2022Modified: Jun 17, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

Affected (22)

Products: Linux: Linux Kernel · Fedoraproject: Fedora · Debian: Debian Linux · +2 more

Show all products

1 product

1 product

1 product

15 products

Active Iq Unified Manager

E Series Santricity Os Controller

Solidfire, Enterprise Sds & Hci Storage Node

Solidfire & Hci Management Node

Fas Baseboard Management Controller Firmware

Aff Baseboard Management Controller Firmware

Hci Compute Node Firmware

Oracle

3 products

Communications Cloud Native Core Binding Support Function

Communications Cloud Native Core Network Exposure Function

Communications Cloud Native Core Policy

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 5.14.21

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp E Series Santricity Os Controller	From 11.0 to 11.70.1
Netapp Solidfire, Enterprise Sds & Hci Storage Node	All versions
Netapp Solidfire & Hci Management Node	All versions

Configuration E

1 platform

Running on/with	Platform Versions
Netapp Fas Baseboard Management Controller	Version 8300

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas Baseboard Management Controller Firmware	All versions

Running on/with	Platform Versions
Netapp Fas Baseboard Management Controller	Version 8700

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff Baseboard Management Controller Firmware	All versions

Running on/with	Platform Versions
Netapp Aff Baseboard Management Controller	Version a400

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A700s Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A700s	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700e Firmware	All versions

Running on/with	Platform Versions
Netapp H700e	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500e Firmware	All versions

Running on/with	Platform Versions
Netapp H500e	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300e Firmware	All versions

Running on/with	Platform Versions
Netapp H300e	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Hci Compute Node Firmware	All versions

Running on/with	Platform Versions
Netapp Hci Compute Node	All versions

Configuration Q

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Cloud Native Core Binding Support Function	Version 22.1.3
Oracle Communications Cloud Native Core Network Exposure Function	Version 22.1.1
Oracle Communications Cloud Native Core Policy	Version 22.2.0