← Back

CVE-2021-27364

nvd nist
Published: Mar 7, 2021Modified: Jul 30, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

Affected (15)

Show all products
Netapp: Cloud Backup, Solidfire Baseboard Management Controller Firmware · Linux: Linux Kernel · Debian: Debian Linux · Oracle: Tekelec Platform Distribution · Canonical: Ubuntu Linux
Netapp
2 products
Cloud Backup
Solidfire Baseboard Management Controller Firmware
Linux
1 product
Linux Kernel
Debian
1 product
Debian Linux
Oracle
1 product
Tekelec Platform Distribution
Canonical
1 product
Ubuntu Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Configuration B
7 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
Before 4.4.260
Linux Kernel
From 4.10 to 4.14.224
Linux Kernel
From 4.15 to 4.19.179
Linux Kernel
From 4.20 to 5.4.103
Linux Kernel
From 4.5 to 4.9.260
Linux Kernel
From 5.11 to 5.11.4
Linux Kernel
From 5.5 to 5.10.21
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Solidfire Baseboard Management Controller Firmware
All versions
Running on/withPlatform Versions
Netapp
Solidfire Baseboard Management Controller
All versions
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Tekelec Platform Distribution
From 7.4.0 to 7.7.1
Configuration F
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 20.04

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (18)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Mailing ListPatchVendor Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.