A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands.
                
            References
                    | Link | Resource | 
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1976946 | Issue Tracking Third Party Advisory | 
| https://bugzilla.redhat.com/show_bug.cgi?id=1976946 | Issue Tracking Third Party Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
Configuration 2 (hide)
| 
 | 
Configuration 3 (hide)
| 
 | 
History
                    21 Nov 2024, 06:22
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1976946 - Issue Tracking, Third Party Advisory | 
23 Aug 2021, 20:33
| Type | Values Removed | Values Added | 
|---|---|---|
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1976946 - Issue Tracking, Third Party Advisory | |
| CVSS | v2 : v3 : | v2 : 4.9 v3 : 4.4 | 
| CWE | CWE-119 | |
| CPE | cpe:2.3:o:linux:linux_kernel:5.5:rc1:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.5:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.5:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.5:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.5:rc4:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.5:rc6:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 
13 Aug 2021, 15:46
| Type | Values Removed | Values Added | 
|---|---|---|
| New CVE | 
Information
                Published : 2021-08-13 14:15
Updated : 2024-11-21 06:22
NVD link : CVE-2021-3635
Mitre link : CVE-2021-3635
CVE.ORG link : CVE-2021-3635
JSON object : View
Products Affected
                fedoraproject
- fedora
redhat
- enterprise_linux
linux
- linux_kernel
CWE
                
                    
                        
                        CWE-119
                        
            Improper Restriction of Operations within the Bounds of a Memory Buffer
