CVE-2021-43395

Katalog CVE

CVSS 5.5 · Medium EPSS 0,33%

Kerentanan Improper Locking pada illumos, omniosce omnios +3 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923. A local unprivileged user can cause a deadlock and kernel panic via crafted rename and rmdir calls on tmpfs filesystems. Oracle Solaris 10 and 11 is also affected.

Rincian

Terbit di NVD

26 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-667: Improper Locking

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 23,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://illumos.topicbox.com/groups/developer/T1c9e4f27f8c2f959/security-heads-up-illumos14424 advisory vendor
• https://www.illumos.org/issues/14424 issue tracking · patch · advisory vendor
• https://github.com/illumos/illumos-gate/commit/f859e7171bb5db34321e45585839c6c3200ebb90 patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
• http://www.tribblix.org/relnotes.html release notes · advisory pihak ketiga
• https://github.com/illumos/illumos-gate/blob/069654420de4aade43c63c43cd2896e66945fc8a/usr/src/uts/common/fs/tm... exploit · advisory pihak ketiga
• https://github.com/illumos/illumos-gate/blob/b3403853e80914bd0aade9b5b605da4878078173/usr/src/uts/common/fs/tm... exploit · advisory pihak ketiga
• https://jgardner100.wordpress.com/2022/01/20/security-heads-up/ advisory pihak ketiga
• https://kebe.com/blog/?p=505 advisory pihak ketiga