← Back

CVE-2021-27365

nvd nist
Published: Mar 7, 2021Modified: Jul 30, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message.

Affected (11)

Show all products
Netapp: Cloud Backup, Solidfire Baseboard Management Controller Firmware · Linux: Linux Kernel · Debian: Debian Linux · Oracle: Tekelec Platform Distribution
Netapp
2 products
Cloud Backup
Solidfire Baseboard Management Controller Firmware
Linux
1 product
Linux Kernel
Debian
1 product
Debian Linux
Oracle
1 product
Tekelec Platform Distribution
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Configuration B
7 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
version < 4.4.260
Linux Kernel
4.10 ≤ version < 4.14.224
Linux Kernel
4.15 ≤ version < 4.19.179
Linux Kernel
4.20 ≤ version < 5.4.103
Linux Kernel
4.5 ≤ version < 4.9.260
Linux Kernel
5.11 ≤ version < 5.11.4
Linux Kernel
5.5 ≤ version < 5.10.21
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Tekelec Platform Distribution
7.4.0 ≤ version ≤ 7.7.1
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Solidfire Baseboard Management Controller Firmware
All versions
Running on/withPlatform Versions
Netapp
Solidfire Baseboard Management Controller
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (20)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Mailing ListPatchVendor Advisory
Source: cve@mitre.org
Mailing ListPatchVendor Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.