CVE-2021-38575
01.12.2021, 18:15
NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| tianocore | edk2 | 𝑥 ≤ 202105 |
| insyde | kernel | 5.0 |
| insyde | kernel | 5.1 |
| insyde | kernel | 5.2 |
| insyde | kernel | 5.3 |
| insyde | kernel | 5.4 |
| insyde | kernel | 5.5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| edk2-aarch64 |
| ||||||||||||||||||||||
| edk2-ovmf |
|
Common Weakness Enumeration
- CWE-124 - Buffer Underwrite ('Buffer Underflow')The software writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.