CVE-2021-20322CWE-330

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to…

published February 18, 2022

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06902 · 94.1th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2022-02-18T17:50Z
EPSS history
Timeline
  • 18 FEB 17:50Z
    A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to…
    cvelistv5