CVE-2021-38429

Katalog CVE

CVSS 9.1 · Critical EPSS 1,5%

Kerentanan Insufficient Control of Network Message Volume (Network Amplification) pada objectcomputing opendds. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure.

Rincian

Terbit di NVD

5 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-406: Insufficient Control of Network Message Volume (Network Amplification)

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 advisory pihak ketiga · pemerintah AS
• https://opendds.org/ product