CVE-2021-3905

Katalog CVE

CVSS 7.5 · High EPSS 2,0%

Kerentanan Missing Release of Memory after Effective Lifetime pada openvswitch, redhat enterprise linux fast datapath +2 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.

Rincian

Terbit di NVD

23 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 80,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2019692 issue tracking · patch · advisory pihak ketiga
• https://github.com/openvswitch/ovs-issues/issues/226 exploit · issue tracking · patch · advisory pihak ketiga
• https://github.com/openvswitch/ovs/commit/803ed12e31b0377c37d7aa8c94b3b92f2081e349 patch · advisory pihak ketiga
• https://ubuntu.com/security/CVE-2021-3905 patch · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2021-3905 advisory pihak ketiga
• https://security.gentoo.org/glsa/202311-16