← Back

CVE-2021-38575

nvd nist
Published: Dec 1, 2021Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

Affected (7)

Products: Tianocore: Edk2 · Insyde: Kernel
1 product
Edk2
1 product
Kernel
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Up to 202105
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Insyde
Version 5.0
Version 5.1
Version 5.2
Version 5.3
Version 5.4
Version 5.5

References (5)

Source: infosec@edk2.groups.io
ExploitIssue TrackingVendor Advisory
Source: infosec@edk2.groups.io
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.