CVE-2021-33910CWE-770denial-of-service

CVE-2021-33910

Medium · published July 20, 2021

CVSS v3.1
5.5
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.08792 · 95.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2021-07-20T23:15Z
Affected products (9)
ProductVersionsFixed in
systemd_project/systemd< 246.15246.15
systemd_project/systemd≥ 247, < 247.8247.8
systemd_project/systemd≥ 248, < 248.5248.5
systemd_project/systemd≥ 249, < 249.1249.1
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
debian/debian_linuxall versions—
netapp/hci_management_nodeall versions—
netapp/solidfireall versions—
References (36)
http://www.openwall.com/lists/oss-security/2021/08/04/2 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2021/08/17/3 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2021/09/07/3 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf · af854a3a-2127-422b-91ae-364da2661108https://github.com/systemd/systemd-stable/commit/4a1c5f34bd3e1daed4490e9d97918e504d19733b · af854a3a-2127-422b-91ae-364da2661108https://github.com/systemd/systemd-stable/commit/764b74113e36ac5219a4b82a05f311b5a92136ce · af854a3a-2127-422b-91ae-364da2661108https://github.com/systemd/systemd-stable/commit/b00674347337b7531c92fdb65590ab253bb57538 · af854a3a-2127-422b-91ae-364da2661108https://github.com/systemd/systemd-stable/commit/cfd14c65374027b34dbbc4f0551456c5dc2d1f61 · af854a3a-2127-422b-91ae-364da2661108https://github.com/systemd/systemd/commit/b34a4f0e6729de292cb3b0c03c1d48f246ad896b · af854a3a-2127-422b-91ae-364da2661108https://github.com/systemd/systemd/pull/20256/commits/441e0115646d54f080e5c3bb0ba477c892861ab9 · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2LSDMHAKI4LGFOCSPXNVVSEWQFAVFWR7/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/ · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202107-48 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20211104-0008/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2021/dsa-4942 · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2021/07/20/2 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-222547.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttp://packetstormsecurity.com/files/163621/Sequoia-A-Deep-Root-In-Linuxs-Filesystem-Layer.html · [email protected]http://www.openwall.com/lists/oss-security/2021/08/04/2 · [email protected]http://www.openwall.com/lists/oss-security/2021/08/17/3 · [email protected]http://www.openwall.com/lists/oss-security/2021/09/07/3 · [email protected]https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf · [email protected]https://github.com/systemd/systemd-stable/commit/4a1c5f34bd3e1daed4490e9d97918e504d19733b · [email protected]https://github.com/systemd/systemd-stable/commit/764b74113e36ac5219a4b82a05f311b5a92136ce · [email protected]https://github.com/systemd/systemd-stable/commit/b00674347337b7531c92fdb65590ab253bb57538 · [email protected]https://github.com/systemd/systemd-stable/commit/cfd14c65374027b34dbbc4f0551456c5dc2d1f61 · [email protected]https://github.com/systemd/systemd/commit/b34a4f0e6729de292cb3b0c03c1d48f246ad896b · [email protected]https://github.com/systemd/systemd/pull/20256/commits/441e0115646d54f080e5c3bb0ba477c892861ab9 · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2LSDMHAKI4LGFOCSPXNVVSEWQFAVFWR7/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/ · [email protected]https://security.gentoo.org/glsa/202107-48 · [email protected]https://security.netapp.com/advisory/ntap-20211104-0008/ · [email protected]https://www.debian.org/security/2021/dsa-4942 · [email protected]https://www.openwall.com/lists/oss-security/2021/07/20/2 · [email protected]http://packetstormsecurity.com/files/163621/Sequoia-A-Deep-Root-In-Linuxs-Filesystem-Layer.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 20 JUL 18:13Z
    basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a…
    cvelistv5