Vulnerability CVE-2021-43267: Information

Description

An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2021-43267
Published: Nov. 3, 2021
Modified: Nov. 7, 2023
Error type identifier: CWE-1284

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
kernel-image-mpsisyphus5.14.16-alt16.8.4-alt1ALT-PU-2021-3220-1288803Fixed
kernel-image-mpp106.1.19-alt16.1.19-alt1ALT-PU-2023-4894-3327092Fixed
kernel-image-rpi-defsisyphus5.10.81-alt15.15.92-alt2ALT-PU-2021-3451-1291010Fixed
kernel-image-rpi-defp105.10.81-alt15.15.92-alt2ALT-PU-2021-3458-1291190Fixed
kernel-image-rpi-defp95.10.81-alt15.10.81-alt1ALT-PU-2021-3468-1291222Fixed
kernel-image-rpi-unsisyphus5.15.6-alt16.6.23-alt1ALT-PU-2021-3563-1292137Fixed
kernel-image-rpi-unp105.15.6-alt16.1.77-alt1ALT-PU-2021-3573-1292365Fixed
kernel-image-rtsisyphus5.10.78-alt1.rt566.1.83-alt1.rt28ALT-PU-2021-3444-1291155Fixed
kernel-image-rtp105.10.78-alt1.rt565.10.215-alt1.rt107ALT-PU-2021-3477-1291174Fixed
kernel-image-std-debugsisyphus5.10.82-alt16.1.87-alt1ALT-PU-2021-3376-1290642Fixed
kernel-image-std-defsisyphus5.10.77-alt16.1.87-alt1ALT-PU-2021-3230-1288849Fixed
kernel-image-std-defp105.10.79-alt15.10.213-alt1ALT-PU-2021-3309-1289747Fixed
kernel-image-std-defc9f25.10.78-alt0.c9f.25.10.214-alt0.c9f.2ALT-PU-2021-3282-1289377Fixed
kernel-image-std-kvmsisyphus5.10.77-alt15.10.176-alt1ALT-PU-2021-3233-1288868Fixed
kernel-image-un-defsisyphus5.14.16-alt16.6.28-alt1ALT-PU-2021-3232-1288857Fixed
kernel-image-un-defsisyphus_riscv645.16.8-alt1.rv646.6.28-alt1.0.portALT-PU-2022-3985-1-Fixed
kernel-image-un-defp105.14.17-alt16.1.85-alt1ALT-PU-2021-3270-1289225Fixed
kernel-image-un-defp95.10.78-alt15.10.215-alt1ALT-PU-2021-3268-1289223Fixed
kernel-image-un-defc10f15.14.17-alt16.1.85-alt0.c10f.1ALT-PU-2021-3270-1289225Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://github.com/torvalds/linux/commit/fa40d9734a57bcbfa79a280189799f76c88f7bb0
  • Patch
  • Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16
  • Mailing List
  • Release Notes
  • Vendor Advisory
https://security.netapp.com/advisory/ntap-20211125-0002/
  • Third Party Advisory
[oss-security] 20220210 CVE-2022-0435: Remote Stack Overflow in Linux Kernel TIPC Module since 4.8 (net/tipc)
  • Exploit
  • Mailing List
  • Third Party Advisory
FEDORA-2021-a093973910
    FEDORA-2021-bdd146e463

        1. Configuration 1

          cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
          Start including
          5.10
          End excliding
          5.10.77
          cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
          Start including
          5.11
          End excliding
          5.14.16

          Configuration 2

          cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
          cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

          Configuration 3

          cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
          Running on/with:
          cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

          Configuration 4

          cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
          Running on/with:
          cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

          Configuration 5

          cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
          Running on/with:
          cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

          Configuration 6

          cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
          Running on/with:
          cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*

          Configuration 7

          cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
          Running on/with:
          cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*

          Configuration 8

          cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
          Running on/with:
          cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*

          Configuration 9

          cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
          Running on/with:
          cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
      Version: v24.4.2
      Back to top