CVE-2021-33910

Katalog CVE

CVSS 5.5 · Medium EPSS 8,8%

Kerentanan Allocation of Resources Without Limits or Throttling pada systemd project systemd, fedoraproject fedora +3 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

Rincian

Terbit di NVD

20 Juli 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

8,8% peluang dieksploitasi; lebih tinggi dari 95,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2021/08/04/2 mailing list · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/08/17/3 mailing list · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/09/07/3 mailing list · patch · advisory pihak ketiga
• https://github.com/systemd/systemd-stable/commit/4a1c5f34bd3e1daed4490e9d97918e504d19733b patch · advisory pihak ketiga
• https://github.com/systemd/systemd-stable/commit/764b74113e36ac5219a4b82a05f311b5a92136ce patch · advisory pihak ketiga
• https://github.com/systemd/systemd-stable/commit/b00674347337b7531c92fdb65590ab253bb57538 patch · advisory pihak ketiga
• https://github.com/systemd/systemd-stable/commit/cfd14c65374027b34dbbc4f0551456c5dc2d1f61 patch · advisory pihak ketiga
• https://github.com/systemd/systemd/commit/b34a4f0e6729de292cb3b0c03c1d48f246ad896b patch · advisory pihak ketiga
• https://github.com/systemd/systemd/pull/20256/commits/441e0115646d54f080e5c3bb0ba477c892861ab9 patch · advisory pihak ketiga
• http://packetstormsecurity.com/files/163621/Sequoia-A-Deep-Root-In-Linuxs-Filesystem-Layer.html exploit · advisory pihak ketiga · vdb entry
• https://security.gentoo.org/glsa/202107-48 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20211104-0008/ advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4942 advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2021/07/20/2 exploit · mailing list · advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2LSDMHAKI4LGF...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B...