CVE-2021-47244CWE-125

CVE-2021-47244

High · published May 21, 2024

CVSS v3.1
8.2
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mptcp: Fix out of bounds when parsing TCP options

The TCP option parser in mptcp (mptcp_get_options) could read one byte

out of bounds. When the length is 1, the execution flow gets into the

loop, reads one byte of the opcode, and if the opcode is neither

TCPOPT_EOL nor TCPOPT_NOP, it reads one more byte, which exceeds the

length of 1.

This fix is inspired by commit 9609dad263f8 ("ipv4: tcp_input: fix stack

out of bounds when parsing TCP options.").

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00719 · 53.3th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-05-21T19:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 5.10.465.10.46
linux/linux_kernel≥ 5.11, < 5.12.135.12.13
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
EPSS history
Timeline
  • 21 MAY 14:19Z
    mptcp: Fix out of bounds when parsing TCP options
    cvelistv5