CVE-2021-27365

概要

参考情報

• packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html · Third Party Advisory
• blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html · Exploit
• bugzilla.suse.com/show_bug.cgi · Issue Tracking
• git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit · Mailing List
• git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit · Mailing List
• lists.debian.org/debian-lts-announce/2021/03/msg00010.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/03/msg00035.html · Mailing List
• security.netapp.com/advisory/ntap-20210409-0001 · Third Party Advisory
• openwall.com/lists/oss-security/2021/03/06/1 · Mailing List
• oracle.com/security-alerts/cpuoct2021.html

tekelec platform distribution のその他の脆弱性

• CVE-2021-30640中 6.5A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass…
• CVE-2021-25215高 7.5In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview …
• CVE-2021-20265中 5.5A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. T…
• CVE-2021-27364高 7.1An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an u…
• CVE-2021-3156高 7.8悪用確認済み（CISA KEV）Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root …