CVE-2021-47347CWE-120

CVE-2021-47347

High · published May 21, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wl1251: Fix possible buffer overflow in wl1251_cmd_scan

Function wl1251_cmd_scan calls memcpy without checking the length.

Harden by checking the length is within the maximum allowed size.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00810 · 56.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-05-21T19:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel< 4.4.2764.4.276
linux/linux_kernel≥ 4.5, < 4.9.2764.9.276
linux/linux_kernel≥ 4.10, < 4.14.2404.14.240
linux/linux_kernel≥ 4.15, < 4.19.1984.19.198
linux/linux_kernel≥ 4.20, < 5.4.1335.4.133
linux/linux_kernel≥ 5.5, < 5.10.515.10.51
linux/linux_kernel≥ 5.11, < 5.12.185.12.18
linux/linux_kernel≥ 5.13, < 5.13.35.13.3
References (18)
https://git.kernel.org/stable/c/0f6c0488368c9ac1aa685821916fadba32f5d1ef · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/115103f6e3f1c26c473766c16439c7c8b235529a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/302e2ee34c5f7c5d805b7f835d9a6f2b43474e2a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/40af3960a15339e8bbd3be50c3bc7b35e1a0b6ea · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/57ad99ae3c6738ba87bad259bb57c641ca68ebf6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c5e4a10d7bd5d4f419d8b9705dff60cf69b302a1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d10a87a3535cce2b890897914f5d0d83df669c63 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d3d8b9c9c7843dce31e284927d4c9904fd5a510a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d71dddeb5380613f9ef199f3e7368fd78fb1a46e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0f6c0488368c9ac1aa685821916fadba32f5d1ef · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/115103f6e3f1c26c473766c16439c7c8b235529a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/302e2ee34c5f7c5d805b7f835d9a6f2b43474e2a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/40af3960a15339e8bbd3be50c3bc7b35e1a0b6ea · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/57ad99ae3c6738ba87bad259bb57c641ca68ebf6 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c5e4a10d7bd5d4f419d8b9705dff60cf69b302a1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d10a87a3535cce2b890897914f5d0d83df669c63 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d3d8b9c9c7843dce31e284927d4c9904fd5a510a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d71dddeb5380613f9ef199f3e7368fd78fb1a46e · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 MAY 14:35Z
    wl1251: Fix possible buffer overflow in wl1251_cmd_scan
    cvelistv5