← Back

CVE-2021-4157

nvd nist
Published: Mar 25, 2022Modified: Jun 17, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: NVD

Description

An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system.

Affected (19)

Show all products
Linux: Linux Kernel · Fedoraproject: Fedora · Netapp: H300e Firmware, H300s Firmware, H500e Firmware, H500s Firmware, H700e Firmware, H700s Firmware, H410s Firmware · Oracle: Communications Cloud Native Core Binding Support Function
Linux
1 product
Linux Kernel
Fedoraproject
1 product
Fedora
Netapp
7 products
H300e Firmware
H300s Firmware
H500e Firmware
H500s Firmware
H700e Firmware
H700s Firmware
H410s Firmware
Oracle
1 product
Communications Cloud Native Core Binding Support Function
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
4.0 ≤ version < 4.4.269
Linux Kernel
4.10 ≤ version < 4.14.233
Linux Kernel
4.15 ≤ version < 4.19.191
Linux Kernel
4.20 ≤ version < 5.4.120
Linux Kernel
4.5 ≤ version < 4.9.269
Linux Kernel
5.11 ≤ version < 5.11.22
Linux Kernel
5.12 ≤ version < 5.12.5
Linux Kernel
5.5 ≤ version < 5.10.38
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 35
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300e Firmware
All versions
Running on/withPlatform Versions
Netapp
H300e
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300s Firmware
All versions
Running on/withPlatform Versions
Netapp
H300s
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500e Firmware
All versions
Running on/withPlatform Versions
Netapp
H500e
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500s Firmware
All versions
Running on/withPlatform Versions
Netapp
H500s
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700e Firmware
All versions
Running on/withPlatform Versions
Netapp
H700e
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700s Firmware
All versions
Running on/withPlatform Versions
Netapp
H700s
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410s Firmware
All versions
Running on/withPlatform Versions
Netapp
H410s
All versions
Configuration J
3 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Communications Cloud Native Core Binding Support Function
Version 22.1.1
Communications Cloud Native Core Binding Support Function
Version 22.1.3
Communications Cloud Native Core Binding Support Function
Version 22.2.0

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (8)

Source: secalert@redhat.com
Issue TrackingThird Party Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.