CVE-2021-33631

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-33631
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/01/30/10
http://www.openwall.com/lists/oss-security/2024/01/30/3
http://www.openwall.com/lists/oss-security/2024/01/30/4
http://www.openwall.com/lists/oss-security/2024/01/30/5
http://www.openwall.com/lists/oss-security/2024/01/30/9
http://www.openwall.com/lists/oss-security/2024/01/31/2
http://www.openwall.com/lists/oss-security/2024/01/31/3
http://www.openwall.com/lists/oss-security/2024/02/02/6
http://www.openwall.com/lists/oss-security/2024/02/02/9
http://www.openwall.com/lists/oss-security/2024/02/03/1
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 Patch
https://gitee.com/src-openeuler/kernel/pulls/1389 Release Notes
https://gitee.com/src-openeuler/kernel/pulls/1396 Release Notes
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:huawei:openeuler:*:*:*:*:-:-:*:*
cpe:2.3:o:huawei:openeuler:*:*:*:*:-:linux:*:*
cpe:2.3:o:huawei:openeuler:*:*:*:*:-:-:*:*
History

31 Jan 2024, 15:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/31/3 -
  • () http://www.openwall.com/lists/oss-security/2024/01/31/2 -

31 Jan 2024, 00:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/9 -
  • () http://www.openwall.com/lists/oss-security/2024/01/30/10 -

30 Jan 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/5 -

30 Jan 2024, 15:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/4 -
  • () http://www.openwall.com/lists/oss-security/2024/01/30/3 -

26 Jan 2024, 18:52

Type Values Removed Values Added
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034 - Vendor Advisory
References () https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 - () https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 - Patch
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033 - Vendor Advisory
References () https://gitee.com/src-openeuler/kernel/pulls/1389 - () https://gitee.com/src-openeuler/kernel/pulls/1389 - Release Notes
References () https://gitee.com/src-openeuler/kernel/pulls/1396 - () https://gitee.com/src-openeuler/kernel/pulls/1396 - Release Notes
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035 - Vendor Advisory
CWE CWE-190
CPE cpe:2.3:o:huawei:openeuler:*:*:*:*:-:-:*:*
cpe:2.3:o:huawei:openeuler:*:*:*:*:-:linux:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

26 Jan 2024, 09:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 -

18 Jan 2024, 15:50

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-18 15:15

Updated : 2024-02-03 03:15

NVD link : CVE-2021-33631

Mitre link : CVE-2021-33631

CVE.ORG link : CVE-2021-33631

JSON object : View

Products Affected

huawei

  • openeuler
CWE
CWE-190

Integer Overflow or Wraparound