CVE-2021-33630

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-33630
NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/01/30/10
http://www.openwall.com/lists/oss-security/2024/01/30/3
http://www.openwall.com/lists/oss-security/2024/01/30/4
http://www.openwall.com/lists/oss-security/2024/01/30/5
http://www.openwall.com/lists/oss-security/2024/01/30/9
http://www.openwall.com/lists/oss-security/2024/01/31/2
http://www.openwall.com/lists/oss-security/2024/01/31/3
http://www.openwall.com/lists/oss-security/2024/02/02/6
http://www.openwall.com/lists/oss-security/2024/02/02/9
http://www.openwall.com/lists/oss-security/2024/02/03/1
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e8b9bfa110896f95d602d8c98d5f9d67e41d78c
https://gitee.com/src-openeuler/kernel/pulls/1389 Release Notes
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:huawei:openeuler:*:*:*:*:-:*:*:*
History

03 Feb 2024, 03:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/02/03/1 -

03 Feb 2024, 00:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/02/02/9 -

02 Feb 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/02/02/6 -

31 Jan 2024, 15:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/31/2 -
  • () http://www.openwall.com/lists/oss-security/2024/01/31/3 -

31 Jan 2024, 00:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/10 -
  • () http://www.openwall.com/lists/oss-security/2024/01/30/9 -

30 Jan 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/5 -

30 Jan 2024, 15:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/3 -
  • () http://www.openwall.com/lists/oss-security/2024/01/30/4 -

26 Jan 2024, 09:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e8b9bfa110896f95d602d8c98d5f9d67e41d78c -

25 Jan 2024, 16:42

Type Values Removed Values Added
References () https://gitee.com/src-openeuler/kernel/pulls/1389 - () https://gitee.com/src-openeuler/kernel/pulls/1389 - Release Notes
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 - Vendor Advisory
CPE cpe:2.3:o:huawei:openeuler:*:*:*:*:-:*:*:*
First Time Huawei
Huawei openeuler
Summary
  • (es) La vulnerabilidad de desreferencia de puntero NULL en el kernel openEuler en Linux (módulos de red) permite la manipulación de puntero. Esta vulnerabilidad está asociada con los archivos de programa net/sched/sch_cbs.C. Este problema afecta al kernel de openEuler: desde 4.19.90 antes de 4.19.90-2401.3.

18 Jan 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-18 15:15

Updated : 2024-02-03 03:15

NVD link : CVE-2021-33630

Mitre link : CVE-2021-33630

CVE.ORG link : CVE-2021-33630

JSON object : View

Products Affected

huawei

  • openeuler
CWE
CWE-476

NULL Pointer Dereference