CVE-2021-47244

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47244

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: mptcp: Fix out of bounds when parsing TCP options The TCP option parser in mptcp (mptcp_get_options) could read one byte out of bounds. When the length is 1, the execution flow gets into the loop, reads one byte of the opcode, and if the opcode is neither TCPOPT_EOL nor TCPOPT_NOP, it reads one more byte, which exceeds the length of 1. This fix is inspired by commit 9609dad263f8 ("ipv4: tcp_input: fix stack out of bounds when parsing TCP options.").

References
Link Resource
https://git.kernel.org/stable/c/07718be265680dcf496347d475ce1a5442f55ad7 Patch
https://git.kernel.org/stable/c/73eeba71dc9932970befa009e68272a3d5ec4a58 Patch
https://git.kernel.org/stable/c/76e02b8905d0691e89e104a882f3bba7dd0f6037 Patch
https://git.kernel.org/stable/c/07718be265680dcf496347d475ce1a5442f55ad7 Patch
https://git.kernel.org/stable/c/73eeba71dc9932970befa009e68272a3d5ec4a58 Patch
https://git.kernel.org/stable/c/76e02b8905d0691e89e104a882f3bba7dd0f6037 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
History

04 Apr 2025, 14:30

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/07718be265680dcf496347d475ce1a5442f55ad7 - () https://git.kernel.org/stable/c/07718be265680dcf496347d475ce1a5442f55ad7 - Patch
References () https://git.kernel.org/stable/c/73eeba71dc9932970befa009e68272a3d5ec4a58 - () https://git.kernel.org/stable/c/73eeba71dc9932970befa009e68272a3d5ec4a58 - Patch
References () https://git.kernel.org/stable/c/76e02b8905d0691e89e104a882f3bba7dd0f6037 - () https://git.kernel.org/stable/c/76e02b8905d0691e89e104a882f3bba7dd0f6037 - Patch
CPE cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-125

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/07718be265680dcf496347d475ce1a5442f55ad7 - () https://git.kernel.org/stable/c/07718be265680dcf496347d475ce1a5442f55ad7 -
References () https://git.kernel.org/stable/c/73eeba71dc9932970befa009e68272a3d5ec4a58 - () https://git.kernel.org/stable/c/73eeba71dc9932970befa009e68272a3d5ec4a58 -
References () https://git.kernel.org/stable/c/76e02b8905d0691e89e104a882f3bba7dd0f6037 - () https://git.kernel.org/stable/c/76e02b8905d0691e89e104a882f3bba7dd0f6037 -

05 Nov 2024, 22:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.2
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: mptcp: corrección de límites al analizar opciones TCP. El analizador de opciones TCP en mptcp (mptcp_get_options) podría leer un byte fuera de los límites. Cuando la longitud es 1, el flujo de ejecución entra en el bucle, lee un byte del código de operación y, si el código de operación no es TCPOPT_EOL ni TCPOPT_NOP, lee un byte más, que excede la longitud de 1. Esta solución está inspirada en la confirmación. 9609dad263f8 ("ipv4: tcp_input: corrige la pila fuera de los límites al analizar las opciones de TCP").

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2025-04-04 14:30

NVD link : CVE-2021-47244

Mitre link : CVE-2021-47244

CVE.ORG link : CVE-2021-47244

JSON object : View

Products Affected

linux

CWE
CWE-125

Out-of-bounds Read