CVE-2021-20322

CVSS V2 Medium 5.8 CVSS V3 High 7.4
Description
A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
Overview
  • CVE ID
  • CVE-2021-20322
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-02-18T18:15:09
  • Last Modified Date
  • 2022-07-28T09:39:30
Weakness Enumerations
CWE URL
CWE-330 http://cwe.mitre.org/data/definitions/330.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 1 OR 5.14.21
AND
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* 1 OR
cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* 1 OR 11.0 11.70.1
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:o:netapp:fas_baseboard_management_controller_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:fas_baseboard_management_controller:8300:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:fas_baseboard_management_controller_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:fas_baseboard_management_controller:8700:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:aff_baseboard_management_controller_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:aff_baseboard_management_controller:a400:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:aff_a700s_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:aff_a700s:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:baseboard_management_controller_h700s_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:baseboard_management_controller_h700s:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:baseboard_management_controller_h700e_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:baseboard_management_controller_h700e:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:baseboard_management_controller_h500s_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:baseboard_management_controller_h500s:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:baseboard_management_controller_h410s_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:baseboard_management_controller_h410s:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:baseboard_management_controller_h500e_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:baseboard_management_controller_h500e:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:baseboard_management_controller_h300e_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:baseboard_management_controller_h300e:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:baseboard_management_controller_h300s_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:baseboard_management_controller_h300s:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:P/I:P/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • NONE
  • Base Score
  • 5.8
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 4.9
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • HIGH
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • NONE
  • Base Score
  • 7.4
  • Base Severity
  • HIGH
  • Exploitability Score
  • 2.2
  • Impact Score
  • 5.2
References
Reference URL Reference Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2014230 Issue Tracking Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=4785305c05b25a242e5314cc821f54ade4c18810 Mailing List Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=6457378fe796815c973f631a1904e147d6ee33b1 Mailing List Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv4/route.c?h=v5.15-rc6&id=67d6d681e15b578c1725bad8ad079e05d1c48a8e Mailing List Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv6/route.c?h=v5.15-rc6&id=a00df2caffed3883c341d5685f830434312e4a43 Mailing List Patch Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20220303-0002/ Third Party Advisory
https://www.debian.org/security/2022/dsa-5096 Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2021-20322
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20322
History
Created Old Value New Value Data Type Notes
2022-05-10 15:46:24 Added to TrackCVE
2022-12-06 10:07:51 2022-02-18T18:15Z 2022-02-18T18:15:09 CVE Published Date updated
2022-12-06 10:07:51 2022-07-28T09:39:30 CVE Modified Date updated
2022-12-06 10:07:51 Analyzed Vulnerability Status updated
2022-12-06 10:07:57 References updated