CVE-2021-3772: falha em kernel
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.2%
A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.
Produtos afetados
n/a · kernelReferências
https://bugzilla.redhat.com/show_bug.cgi?id=2000694https://github.com/torvalds/linux/commit/32f8807a48ae55be0e76880cfe8607a18b5bb0dfhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=32f8807a48ae55be0e76880cfe8607a18b5bb0dfhttps://lists.debian.org/debian-lts-announce/2022/03/msg00012.htmlhttps://security.netapp.com/advisory/ntap-20221007-0001/https://ubuntu.com/security/CVE-2021-3772https://www.debian.org/security/2022/dsa-5096https://www.oracle.com/security-alerts/cpujul2022.html