var-202207-1358
Vulnerability from variot
When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. Linux Kernel Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. ========================================================================== Ubuntu Security Notice USN-5580-1 August 24, 2022
linux-aws vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in the Linux kernel.
Software Description: - linux-aws: Linux kernel for Amazon Web Services (AWS) systems
Details:
It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33655)
It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. A remote attacker could use this to expose sensitive information (kernel memory). (CVE-2022-20368)
Domingo Dirutigliano and Nicola Guerrera discovered that the netfilter subsystem in the Linux kernel did not properly handle rules that truncated packets below the packet header size. When such rules are in place, a remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-36946)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04 ESM: linux-image-4.4.0-1150-aws 4.4.0-1150.165 linux-image-aws 4.4.0.1150.154
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. Description:
Red Hat Advanced Cluster Management for Kubernetes 2.6.6 images
Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in.
This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release:
https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/release_notes/
Security Fix(es): * CVE-2023-28856 redis: Insufficient validation of HINCRBYFLOAT command * CVE-2023-32314 vm2: Sandbox Escape * CVE-2023-32313 vm2: Inspect Manipulation
- Solution:
For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation for details on how to install the images:
https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/install/installing#installing-while-connected-online
- Bugs fixed (https://bugzilla.redhat.com/):
2187525 - CVE-2023-28856 redis: Insufficient validation of HINCRBYFLOAT command 2208376 - CVE-2023-32314 vm2: Sandbox Escape 2208377 - CVE-2023-32313 vm2: Inspect Manipulation
- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
===================================================================== Red Hat Security Advisory
Synopsis: Important: kernel security, bug fix, and enhancement update Advisory ID: RHSA-2023:4789-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:4789 Issue date: 2023-08-29 CVE Names: CVE-2021-33656 CVE-2022-42896 CVE-2023-1637 CVE-2023-1829 CVE-2023-2002 CVE-2023-2124 CVE-2023-3390 CVE-2023-20593 CVE-2023-28466 CVE-2023-35788 =====================================================================
- Summary:
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat CodeReady Linux Builder EUS (v.8.6) - aarch64, ppc64le, x86_64 Red Hat Enterprise Linux BaseOS EUS (v.8.6) - aarch64, noarch, ppc64le, s390x, x86_64
- Description:
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)
-
kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)
-
kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)
-
kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
-
kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds (CVE-2021-33656)
-
kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637)
-
Kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002)
-
kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)
-
hw: amd: Cross-Process Information Leak (CVE-2023-20593)
-
kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
Simultaneous writes to a page on xfs can result in zero-byte data (BZ#2184103)
-
Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208286)
-
Low memory deadlock with md devices and external (imsm) metadata handling
-
- requires a kernfs notification backport (BZ#2208542)
-
Windows Server 2019 guest randomly pauses with "KVM: entry failed, hardware error 0x80000021" (BZ#2211663)
-
Marvell 8.7 Bug qedi shutdown handler hangs upon reboot (BZ#2215334)
-
aacraid misses interrupts when a CPU is disabled resulting in scsi timeouts and the adapter being unusable until reboot. (BZ#2216499)
-
rbd: avoid fast-diff corruption in snapshot-based mirroring [8.9] (BZ#2216770)
-
OCS 4.8 cephfs kernel crash : mds_dispatch ceph_handle_snap unable to handle kernel NULL (BZ#2218273)
-
FJ8.6 Bug: System panic occurs because the list used by i40e driver is corrupted (BZ#2219262)
-
st_gmac tx-checksum offload on vlan is not consistent with st_gmac interface (BZ#2219908)
-
Regression of 3b8cc6298724 ("blk-cgroup: Optimize blkcg_rstat_flush()") (BZ#2220811)
-
refcount_t overflow often happens in mem_cgroup_id_get_online() (BZ#2221011)
-
Scheduler update (rhel8.8) (BZ#2221304)
-
RHEL8.6 boot panic with message "kernel BUG at lib/list_debug.c:28!" (BZ#2222247)
-
Enable conntrack clash resolution for GRE (BZ#2223543)
-
Intel 8.8 BUG SPR perf: Workaround the UPI intel_uncore_has_discovery_tables issue on SPR MCC and LCC (BZ#2225514)
-
KVM: x86: fix sending PV IPI (BZ#2226580)
-
libceph: harden msgr2.1 frame segment length checks [8.x] (BZ#2227074)
Enhancement(s):
-
Mellanox 8.7 FEAT mlx5: It's possible to enable LRO when XDP is active (BZ#2165585)
-
Export symbol pci_find_host_bridge (BZ#2225335)
-
Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
- Bugs fixed (https://bugzilla.redhat.com/):
2108696 - CVE-2021-33656 kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds 2147364 - CVE-2022-42896 kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c 2179000 - CVE-2023-28466 kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference 2181891 - CVE-2023-1637 kernel: save/restore speculative MSRs during S3 suspend/resume 2187308 - CVE-2023-2002 Kernel: bluetooth: Unauthorized management command execution 2187439 - CVE-2023-2124 kernel: OOB access in the Linux kernel's XFS subsystem 2188470 - CVE-2023-1829 kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter 2213260 - CVE-2023-3390 kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests 2215768 - CVE-2023-35788 kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() 2217845 - CVE-2023-20593 hw: amd: Cross-Process Information Leak
- Package List:
Red Hat Enterprise Linux BaseOS EUS (v.8.6):
Source: kernel-4.18.0-372.70.1.el8_6.src.rpm
aarch64: bpftool-4.18.0-372.70.1.el8_6.aarch64.rpm bpftool-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-core-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-cross-headers-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debug-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debug-core-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debug-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debug-devel-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debug-modules-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debug-modules-extra-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debuginfo-common-aarch64-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-devel-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-headers-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-modules-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-modules-extra-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-tools-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-tools-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-tools-libs-4.18.0-372.70.1.el8_6.aarch64.rpm perf-4.18.0-372.70.1.el8_6.aarch64.rpm perf-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm python3-perf-4.18.0-372.70.1.el8_6.aarch64.rpm python3-perf-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm
noarch: kernel-abi-stablelists-4.18.0-372.70.1.el8_6.noarch.rpm kernel-doc-4.18.0-372.70.1.el8_6.noarch.rpm
ppc64le: bpftool-4.18.0-372.70.1.el8_6.ppc64le.rpm bpftool-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-core-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-cross-headers-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debug-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debug-core-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debug-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debug-devel-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debug-modules-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debug-modules-extra-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-devel-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-headers-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-modules-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-modules-extra-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-tools-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-tools-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-tools-libs-4.18.0-372.70.1.el8_6.ppc64le.rpm perf-4.18.0-372.70.1.el8_6.ppc64le.rpm perf-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm python3-perf-4.18.0-372.70.1.el8_6.ppc64le.rpm python3-perf-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm
s390x: bpftool-4.18.0-372.70.1.el8_6.s390x.rpm bpftool-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm kernel-4.18.0-372.70.1.el8_6.s390x.rpm kernel-core-4.18.0-372.70.1.el8_6.s390x.rpm kernel-cross-headers-4.18.0-372.70.1.el8_6.s390x.rpm kernel-debug-4.18.0-372.70.1.el8_6.s390x.rpm kernel-debug-core-4.18.0-372.70.1.el8_6.s390x.rpm kernel-debug-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm kernel-debug-devel-4.18.0-372.70.1.el8_6.s390x.rpm kernel-debug-modules-4.18.0-372.70.1.el8_6.s390x.rpm kernel-debug-modules-extra-4.18.0-372.70.1.el8_6.s390x.rpm kernel-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm kernel-debuginfo-common-s390x-4.18.0-372.70.1.el8_6.s390x.rpm kernel-devel-4.18.0-372.70.1.el8_6.s390x.rpm kernel-headers-4.18.0-372.70.1.el8_6.s390x.rpm kernel-modules-4.18.0-372.70.1.el8_6.s390x.rpm kernel-modules-extra-4.18.0-372.70.1.el8_6.s390x.rpm kernel-tools-4.18.0-372.70.1.el8_6.s390x.rpm kernel-tools-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm kernel-zfcpdump-4.18.0-372.70.1.el8_6.s390x.rpm kernel-zfcpdump-core-4.18.0-372.70.1.el8_6.s390x.rpm kernel-zfcpdump-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm kernel-zfcpdump-devel-4.18.0-372.70.1.el8_6.s390x.rpm kernel-zfcpdump-modules-4.18.0-372.70.1.el8_6.s390x.rpm kernel-zfcpdump-modules-extra-4.18.0-372.70.1.el8_6.s390x.rpm perf-4.18.0-372.70.1.el8_6.s390x.rpm perf-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm python3-perf-4.18.0-372.70.1.el8_6.s390x.rpm python3-perf-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm
x86_64: bpftool-4.18.0-372.70.1.el8_6.x86_64.rpm bpftool-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-core-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-cross-headers-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debug-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debug-core-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debug-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debug-devel-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debug-modules-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debug-modules-extra-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-devel-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-headers-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-modules-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-modules-extra-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-tools-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-tools-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-tools-libs-4.18.0-372.70.1.el8_6.x86_64.rpm perf-4.18.0-372.70.1.el8_6.x86_64.rpm perf-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm python3-perf-4.18.0-372.70.1.el8_6.x86_64.rpm python3-perf-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm
Red Hat CodeReady Linux Builder EUS (v.8.6):
aarch64: bpftool-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debug-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-debuginfo-common-aarch64-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-tools-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm kernel-tools-libs-devel-4.18.0-372.70.1.el8_6.aarch64.rpm perf-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm python3-perf-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm
ppc64le: bpftool-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debug-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-tools-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm kernel-tools-libs-devel-4.18.0-372.70.1.el8_6.ppc64le.rpm perf-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm python3-perf-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm
x86_64: bpftool-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debug-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-tools-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm kernel-tools-libs-devel-4.18.0-372.70.1.el8_6.x86_64.rpm perf-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm python3-perf-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2021-33656 https://access.redhat.com/security/cve/CVE-2022-42896 https://access.redhat.com/security/cve/CVE-2023-1637 https://access.redhat.com/security/cve/CVE-2023-1829 https://access.redhat.com/security/cve/CVE-2023-2002 https://access.redhat.com/security/cve/CVE-2023-2124 https://access.redhat.com/security/cve/CVE-2023-3390 https://access.redhat.com/security/cve/CVE-2023-20593 https://access.redhat.com/security/cve/CVE-2023-28466 https://access.redhat.com/security/cve/CVE-2023-35788 https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCAAGBQJk7gVaAAoJENzjgjWX9erEbPcP/A7VJs/bk9ehr9RmtFheMoZw aTjj77INTVUXeEw303RN0MY4WeA9iNLfoawU9pQwKSOTPFN2LH/dX5M5G4z8fcF4 AqJ52MLnaRvfqvGR/VBL5ndG6Txal4qBaEthXiZPjXVLPdLBLUpKxFvc037T3vLa N1TlS84iuCj+lRKKK3mWzwpuxF+7rG5TyjfmKxBpdVpiy+3CesWdg8z/cp3yHnZR D+/bKMlWaFrot6epZTolqXR3q8gtzdfdvBT+uNCqWFLC4fbRcECz659shdKCe94s au3GaLQoSsv/1o2/Fr9p0X2355CUwo/blWmQRdxHhCrNVAW43zct7UdIefjQFdlN JMEKMLPlsPIqwFM5O24oXNwu2WDFBqhRqVOpU29wCb2A+nZX9KW7G5+wraGQsUle YKt8MyQTrmruN21UqRGTMBUzFmVcVbMoVuKhw8Ruzu+LT7Q8emlVlUIxdeZevVyI qAsK4u/21qEur8snQUZOs1K5JZ/eGvPPOFIlDKamAZUA2KMBRHVf4UpXWRl+yUNZ BwVlqJ883g5fzkyn610ip8wezvIt6JHbQTwfn3GL+GlZm8C6P7TnInRyRAPrEVyb x6ZgJXJcUSvxQ5vfDRxDzQBaki0LlsxEu0z4MNWTlQkijDMqEt+YvOoWnAPOfb6S E/3xFaymeUv8HNa2jzZE =8lpC -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202207-1358",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "kernel",
"scope": "lt",
"trust": 1.0,
"vendor": "linux",
"version": "5.10.127"
},
{
"model": "linux",
"scope": "eq",
"trust": 1.0,
"vendor": "debian",
"version": "10.0"
},
{
"model": "openeuler",
"scope": "eq",
"trust": 1.0,
"vendor": "huawei",
"version": "20.03"
},
{
"model": "openeuler",
"scope": null,
"trust": 0.8,
"vendor": "huawei",
"version": null
},
{
"model": "gnu/linux",
"scope": null,
"trust": 0.8,
"vendor": "debian",
"version": null
},
{
"model": "kernel",
"scope": null,
"trust": 0.8,
"vendor": "linux",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:huawei:openeuler:20.03:sp3:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:huawei:openeuler:20.03:sp1:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:huawei:openeuler:20.03:-:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "5.10.127",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ubuntu",
"sources": [
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168236"
},
{
"db": "PACKETSTORM",
"id": "168237"
},
{
"db": "PACKETSTORM",
"id": "168177"
},
{
"db": "PACKETSTORM",
"id": "168251"
}
],
"trust": 0.5
},
"cve": "CVE-2021-33656",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 0.9,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Physical",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 6.8,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2021-33656",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2021-33656",
"trust": 1.8,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. Linux Kernel Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. ==========================================================================\nUbuntu Security Notice USN-5580-1\nAugust 24, 2022\n\nlinux-aws vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 16.04 ESM\n\nSummary:\n\nSeveral security issues were fixed in the Linux kernel. \n\nSoftware Description:\n- linux-aws: Linux kernel for Amazon Web Services (AWS) systems\n\nDetails:\n\nIt was discovered that the framebuffer driver on the Linux kernel did \nnot verify size limits when changing font or screen size, leading to an \nout-of-bounds write. A local attacker could use this to cause a denial \nof service (system crash) or possibly execute arbitrary code. \n(CVE-2021-33655)\n\nIt was discovered that the virtual terminal driver in the Linux kernel \ndid not properly handle VGA console font changes, leading to an \nout-of-bounds write. A local attacker could use this to cause a denial \nof service (system crash) or possibly execute arbitrary code. A remote attacker could \nuse this to expose sensitive information (kernel memory). (CVE-2022-20368)\n\nDomingo Dirutigliano and Nicola Guerrera discovered that the netfilter\nsubsystem in the Linux kernel did not properly handle rules that \ntruncated packets below the packet header size. When such rules are in \nplace, a remote attacker could possibly use this to cause a denial of \nservice (system crash). (CVE-2022-36946)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 16.04 ESM:\n linux-image-4.4.0-1150-aws 4.4.0-1150.165\n linux-image-aws 4.4.0.1150.154\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nATTENTION: Due to an unavoidable ABI change the kernel updates have\nbeen given a new version number, which requires you to recompile and\nreinstall all third party kernel modules you might have installed. \nUnless you manually uninstalled the standard kernel metapackages\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,\nlinux-powerpc), a standard system upgrade will automatically perform\nthis as well. Description:\n\nRed Hat Advanced Cluster Management for Kubernetes 2.6.6 images\n\nRed Hat Advanced Cluster Management for Kubernetes provides the\ncapabilities to address common challenges that administrators and site\nreliability engineers face as they work across a range of public and\nprivate cloud environments. Clusters and applications are all visible and\nmanaged from a single console\u2014with security policy built in. \n\nThis advisory contains the container images for Red Hat Advanced Cluster\nManagement for Kubernetes, which fix several bugs. See the following\nRelease Notes documentation, which will be updated shortly for this\nrelease, for additional details about this release:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/release_notes/\n\nSecurity Fix(es):\n* CVE-2023-28856 redis: Insufficient validation of HINCRBYFLOAT command\n* CVE-2023-32314 vm2: Sandbox Escape\n* CVE-2023-32313 vm2: Inspect Manipulation\n\n3. Solution:\n\nFor Red Hat Advanced Cluster Management for Kubernetes, see the following\ndocumentation for details on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/install/installing#installing-while-connected-online\n\n4. Bugs fixed (https://bugzilla.redhat.com/):\n\n2187525 - CVE-2023-28856 redis: Insufficient validation of HINCRBYFLOAT command\n2208376 - CVE-2023-32314 vm2: Sandbox Escape\n2208377 - CVE-2023-32313 vm2: Inspect Manipulation\n\n5. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Important: kernel security, bug fix, and enhancement update\nAdvisory ID: RHSA-2023:4789-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://access.redhat.com/errata/RHSA-2023:4789\nIssue date: 2023-08-29\nCVE Names: CVE-2021-33656 CVE-2022-42896 CVE-2023-1637 \n CVE-2023-1829 CVE-2023-2002 CVE-2023-2124 \n CVE-2023-3390 CVE-2023-20593 CVE-2023-28466 \n CVE-2023-35788 \n=====================================================================\n\n1. Summary:\n\nAn update for kernel is now available for Red Hat Enterprise Linux 8.6\nExtended Update Support. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat CodeReady Linux Builder EUS (v.8.6) - aarch64, ppc64le, x86_64\nRed Hat Enterprise Linux BaseOS EUS (v.8.6) - aarch64, noarch, ppc64le, s390x, x86_64\n\n3. Description:\n\nThe kernel packages contain the Linux kernel, the core of any Linux\noperating system. \n\nSecurity Fix(es):\n\n* kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in\nnet/bluetooth/l2cap_core.c (CVE-2022-42896)\n\n* kernel: Use-after-free vulnerability in the Linux Kernel traffic control\nindex filter (CVE-2023-1829)\n\n* kernel: UAF in nftables when nft_set_lookup_global triggered after\nhandling named and anonymous sets in batch requests (CVE-2023-3390)\n\n* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt()\n(CVE-2023-35788)\n\n* kernel: when setting font with malicious data by ioctl PIO_FONT, kernel\nwill write memory out of bounds (CVE-2021-33656)\n\n* kernel: save/restore speculative MSRs during S3 suspend/resume\n(CVE-2023-1637)\n\n* Kernel: bluetooth: Unauthorized management command execution\n(CVE-2023-2002)\n\n* kernel: OOB access in the Linux kernel\u0027s XFS subsystem (CVE-2023-2124)\n\n* hw: amd: Cross-Process Information Leak (CVE-2023-20593)\n\n* kernel: tls: race condition in do_tls_getsockopt may lead to\nuse-after-free or NULL pointer dereference (CVE-2023-28466)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\nBug Fix(es):\n\n* Simultaneous writes to a page on xfs can result in zero-byte data\n(BZ#2184103)\n\n* Invalid character detected by rpminspect in\nDocumentation/translations/zh_CN/process/magic-number.rst (BZ#2208286)\n\n* Low memory deadlock with md devices and external (imsm) metadata handling\n- - requires a kernfs notification backport (BZ#2208542)\n\n* Windows Server 2019 guest randomly pauses with \"KVM: entry failed,\nhardware error 0x80000021\" (BZ#2211663)\n\n* Marvell 8.7 Bug qedi shutdown handler hangs upon reboot (BZ#2215334)\n\n* aacraid misses interrupts when a CPU is disabled resulting in scsi\ntimeouts and the adapter being unusable until reboot. (BZ#2216499)\n\n* rbd: avoid fast-diff corruption in snapshot-based mirroring [8.9]\n(BZ#2216770)\n\n* OCS 4.8 cephfs kernel crash : mds_dispatch ceph_handle_snap unable to\nhandle kernel NULL (BZ#2218273)\n\n* FJ8.6 Bug: System panic occurs because the list used by i40e driver is\ncorrupted (BZ#2219262)\n\n* st_gmac tx-checksum offload on vlan is not consistent with st_gmac\ninterface (BZ#2219908)\n\n* Regression of 3b8cc6298724 (\"blk-cgroup: Optimize blkcg_rstat_flush()\")\n(BZ#2220811)\n\n* refcount_t overflow often happens in mem_cgroup_id_get_online()\n(BZ#2221011)\n\n* Scheduler update (rhel8.8) (BZ#2221304)\n\n* RHEL8.6 boot panic with message \"kernel BUG at lib/list_debug.c:28!\"\n(BZ#2222247)\n\n* Enable conntrack clash resolution for GRE (BZ#2223543)\n\n* Intel 8.8 BUG SPR perf: Workaround the UPI \nintel_uncore_has_discovery_tables issue on SPR MCC and LCC (BZ#2225514)\n\n* KVM: x86: fix sending PV IPI (BZ#2226580)\n\n* libceph: harden msgr2.1 frame segment length checks [8.x] (BZ#2227074)\n\nEnhancement(s):\n\n* Mellanox 8.7 FEAT mlx5: It\u0027s possible to enable LRO when XDP is active\n(BZ#2165585)\n\n* Export symbol pci_find_host_bridge (BZ#2225335)\n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect. \n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n2108696 - CVE-2021-33656 kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds\n2147364 - CVE-2022-42896 kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c\n2179000 - CVE-2023-28466 kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference\n2181891 - CVE-2023-1637 kernel: save/restore speculative MSRs during S3 suspend/resume\n2187308 - CVE-2023-2002 Kernel: bluetooth: Unauthorized management command execution\n2187439 - CVE-2023-2124 kernel: OOB access in the Linux kernel\u0027s XFS subsystem\n2188470 - CVE-2023-1829 kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter\n2213260 - CVE-2023-3390 kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests\n2215768 - CVE-2023-35788 kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt()\n2217845 - CVE-2023-20593 hw: amd: Cross-Process Information Leak\n\n6. Package List:\n\nRed Hat Enterprise Linux BaseOS EUS (v.8.6):\n\nSource:\nkernel-4.18.0-372.70.1.el8_6.src.rpm\n\naarch64:\nbpftool-4.18.0-372.70.1.el8_6.aarch64.rpm\nbpftool-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-core-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-cross-headers-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debug-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debug-core-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debug-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debug-devel-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debug-modules-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debug-modules-extra-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debuginfo-common-aarch64-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-devel-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-headers-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-modules-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-modules-extra-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-tools-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-tools-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-tools-libs-4.18.0-372.70.1.el8_6.aarch64.rpm\nperf-4.18.0-372.70.1.el8_6.aarch64.rpm\nperf-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\npython3-perf-4.18.0-372.70.1.el8_6.aarch64.rpm\npython3-perf-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\n\nnoarch:\nkernel-abi-stablelists-4.18.0-372.70.1.el8_6.noarch.rpm\nkernel-doc-4.18.0-372.70.1.el8_6.noarch.rpm\n\nppc64le:\nbpftool-4.18.0-372.70.1.el8_6.ppc64le.rpm\nbpftool-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-core-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-cross-headers-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debug-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debug-core-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debug-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debug-devel-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debug-modules-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debug-modules-extra-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debuginfo-common-ppc64le-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-devel-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-headers-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-modules-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-modules-extra-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-tools-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-tools-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-tools-libs-4.18.0-372.70.1.el8_6.ppc64le.rpm\nperf-4.18.0-372.70.1.el8_6.ppc64le.rpm\nperf-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\npython3-perf-4.18.0-372.70.1.el8_6.ppc64le.rpm\npython3-perf-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\n\ns390x:\nbpftool-4.18.0-372.70.1.el8_6.s390x.rpm\nbpftool-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-core-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-cross-headers-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-debug-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-debug-core-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-debug-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-debug-devel-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-debug-modules-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-debug-modules-extra-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-debuginfo-common-s390x-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-devel-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-headers-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-modules-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-modules-extra-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-tools-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-tools-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-zfcpdump-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-zfcpdump-core-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-zfcpdump-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-zfcpdump-devel-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-zfcpdump-modules-4.18.0-372.70.1.el8_6.s390x.rpm\nkernel-zfcpdump-modules-extra-4.18.0-372.70.1.el8_6.s390x.rpm\nperf-4.18.0-372.70.1.el8_6.s390x.rpm\nperf-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm\npython3-perf-4.18.0-372.70.1.el8_6.s390x.rpm\npython3-perf-debuginfo-4.18.0-372.70.1.el8_6.s390x.rpm\n\nx86_64:\nbpftool-4.18.0-372.70.1.el8_6.x86_64.rpm\nbpftool-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-core-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-cross-headers-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debug-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debug-core-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debug-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debug-devel-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debug-modules-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debug-modules-extra-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debuginfo-common-x86_64-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-devel-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-headers-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-modules-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-modules-extra-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-tools-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-tools-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-tools-libs-4.18.0-372.70.1.el8_6.x86_64.rpm\nperf-4.18.0-372.70.1.el8_6.x86_64.rpm\nperf-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\npython3-perf-4.18.0-372.70.1.el8_6.x86_64.rpm\npython3-perf-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\n\nRed Hat CodeReady Linux Builder EUS (v.8.6):\n\naarch64:\nbpftool-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debug-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-debuginfo-common-aarch64-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-tools-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\nkernel-tools-libs-devel-4.18.0-372.70.1.el8_6.aarch64.rpm\nperf-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\npython3-perf-debuginfo-4.18.0-372.70.1.el8_6.aarch64.rpm\n\nppc64le:\nbpftool-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debug-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-debuginfo-common-ppc64le-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-tools-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\nkernel-tools-libs-devel-4.18.0-372.70.1.el8_6.ppc64le.rpm\nperf-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\npython3-perf-debuginfo-4.18.0-372.70.1.el8_6.ppc64le.rpm\n\nx86_64:\nbpftool-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debug-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-debuginfo-common-x86_64-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-tools-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\nkernel-tools-libs-devel-4.18.0-372.70.1.el8_6.x86_64.rpm\nperf-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\npython3-perf-debuginfo-4.18.0-372.70.1.el8_6.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2021-33656\nhttps://access.redhat.com/security/cve/CVE-2022-42896\nhttps://access.redhat.com/security/cve/CVE-2023-1637\nhttps://access.redhat.com/security/cve/CVE-2023-1829\nhttps://access.redhat.com/security/cve/CVE-2023-2002\nhttps://access.redhat.com/security/cve/CVE-2023-2124\nhttps://access.redhat.com/security/cve/CVE-2023-3390\nhttps://access.redhat.com/security/cve/CVE-2023-20593\nhttps://access.redhat.com/security/cve/CVE-2023-28466\nhttps://access.redhat.com/security/cve/CVE-2023-35788\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2023 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nE/3xFaymeUv8HNa2jzZE\n=8lpC\n-----END PGP SIGNATURE-----\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2021-33656"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168236"
},
{
"db": "PACKETSTORM",
"id": "168237"
},
{
"db": "PACKETSTORM",
"id": "168177"
},
{
"db": "PACKETSTORM",
"id": "172587"
},
{
"db": "PACKETSTORM",
"id": "174369"
},
{
"db": "PACKETSTORM",
"id": "168251"
}
],
"trust": 2.43
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2021-33656",
"trust": 3.5
},
{
"db": "OPENWALL",
"id": "OSS-SECURITY/2022/07/19/3",
"trust": 2.0
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020211",
"trust": 0.8
},
{
"db": "PACKETSTORM",
"id": "168251",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "168177",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "168221",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "168237",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "168236",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "168263",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168253",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168264",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168324",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168203",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168335",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168589",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168261",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "168238",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-393734",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2021-33656",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "172587",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "174369",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168236"
},
{
"db": "PACKETSTORM",
"id": "168237"
},
{
"db": "PACKETSTORM",
"id": "168177"
},
{
"db": "PACKETSTORM",
"id": "172587"
},
{
"db": "PACKETSTORM",
"id": "174369"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"id": "VAR-202207-1358",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-393734"
}
],
"trust": 0.01
},
"last_update_date": "2024-07-23T20:37:02.433000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "drop\u00a0old\u00a0FONT\u00a0ioctls",
"trust": 0.8,
"url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.1
},
{
"problemtype": "Out-of-bounds writing (CWE-787) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "http://www.openwall.com/lists/oss-security/2022/07/19/3"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-33656"
},
{
"trust": 1.2,
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch"
},
{
"trust": 1.1,
"url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"
},
{
"trust": 1.1,
"url": "https://www.openeuler.org/en/security/cve/detail.html?id=cve-2021-33656\u0026packagename=kernel"
},
{
"trust": 0.4,
"url": "https://ubuntu.com/security/notices/usn-5591-1"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-33655"
},
{
"trust": 0.2,
"url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.2,
"url": "https://bugzilla.redhat.com/):"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2021-33656"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.1,
"url": "https://www.openeuler.org/en/security/cve/detail.html?id=cve-2021-33656\u0026amp;packagename=kernel"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5591-2"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-snapdragon/4.15.0-1136.146"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux/4.15.0-192.203"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-azure-4.15/4.15.0-1150.165"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-dell300x/4.15.0-1052.57"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-kvm/4.15.0-1126.131"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-gcp-4.15/4.15.0-1135.151"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5591-3"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-20368"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-36946"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5580-1"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3619"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-41674"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-42721"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-30594"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-2196"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3625"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-43750"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-30594"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-4129"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-41218"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-3239"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-3522"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2021-26341"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3239"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-25815"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-42722"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1679"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-2663"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-0361"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3707"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-1582"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-1462"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-22490"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-3028"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-20141"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/release_notes/"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-32314"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-47929"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-39188"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-2663"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-32313"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3623"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-1999"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-26341"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3566"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-1789"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3627"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-27535"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1789"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-20141"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-28856"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-2196"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-23454"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-25265"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3524"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-39189"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-43552"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3970"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3028"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3567"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-0394"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-0461"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-35252"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-25652"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2021-33655"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2023:3326"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3628"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-36227"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3564"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-1195"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/install/installing#installing-while-connected-online"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-42720"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-23946"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-42703"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-25265"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-3522"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-29007"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-1462"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-1679"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-1829"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-35788"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2023:4789"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-1637"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-42896"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-1637"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2022-42896"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-2002"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-2124"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-28466"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/articles/11258"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-35788"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-28466"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-3390"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-20593"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2023-1829"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/team/key/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-20593"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-3390"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-2002"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-2124"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-5591-4"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/linux-aws/4.15.0-1140.151"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168236"
},
{
"db": "PACKETSTORM",
"id": "168237"
},
{
"db": "PACKETSTORM",
"id": "168177"
},
{
"db": "PACKETSTORM",
"id": "172587"
},
{
"db": "PACKETSTORM",
"id": "174369"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-393734"
},
{
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168236"
},
{
"db": "PACKETSTORM",
"id": "168237"
},
{
"db": "PACKETSTORM",
"id": "168177"
},
{
"db": "PACKETSTORM",
"id": "172587"
},
{
"db": "PACKETSTORM",
"id": "174369"
},
{
"db": "PACKETSTORM",
"id": "168251"
},
{
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-07-18T00:00:00",
"db": "VULHUB",
"id": "VHN-393734"
},
{
"date": "2022-07-18T00:00:00",
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"date": "2023-09-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"date": "2022-09-01T16:32:59",
"db": "PACKETSTORM",
"id": "168221"
},
{
"date": "2022-09-02T15:20:53",
"db": "PACKETSTORM",
"id": "168236"
},
{
"date": "2022-09-02T15:21:10",
"db": "PACKETSTORM",
"id": "168237"
},
{
"date": "2022-08-25T15:28:28",
"db": "PACKETSTORM",
"id": "168177"
},
{
"date": "2023-05-26T14:34:05",
"db": "PACKETSTORM",
"id": "172587"
},
{
"date": "2023-08-29T16:27:47",
"db": "PACKETSTORM",
"id": "174369"
},
{
"date": "2022-09-05T15:08:18",
"db": "PACKETSTORM",
"id": "168251"
},
{
"date": "2022-07-18T15:15:08.043000",
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-10-29T00:00:00",
"db": "VULHUB",
"id": "VHN-393734"
},
{
"date": "2022-07-19T00:00:00",
"db": "VULMON",
"id": "CVE-2021-33656"
},
{
"date": "2023-09-28T03:25:00",
"db": "JVNDB",
"id": "JVNDB-2021-020211"
},
{
"date": "2022-10-29T02:52:00.693000",
"db": "NVD",
"id": "CVE-2021-33656"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168236"
},
{
"db": "PACKETSTORM",
"id": "168237"
},
{
"db": "PACKETSTORM",
"id": "168177"
},
{
"db": "PACKETSTORM",
"id": "168251"
}
],
"trust": 0.5
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Linux\u00a0Kernel\u00a0 Out-of-bounds write vulnerability in",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-020211"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "arbitrary",
"sources": [
{
"db": "PACKETSTORM",
"id": "168221"
},
{
"db": "PACKETSTORM",
"id": "168236"
},
{
"db": "PACKETSTORM",
"id": "168237"
},
{
"db": "PACKETSTORM",
"id": "168177"
},
{
"db": "PACKETSTORM",
"id": "168251"
}
],
"trust": 0.5
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.