CVE-2021-33631

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-33631
Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/01/30/10
http://www.openwall.com/lists/oss-security/2024/01/30/3
http://www.openwall.com/lists/oss-security/2024/01/30/4
http://www.openwall.com/lists/oss-security/2024/01/30/5
http://www.openwall.com/lists/oss-security/2024/01/30/9
http://www.openwall.com/lists/oss-security/2024/01/31/2
http://www.openwall.com/lists/oss-security/2024/01/31/3
http://www.openwall.com/lists/oss-security/2024/02/02/6
http://www.openwall.com/lists/oss-security/2024/02/02/9
http://www.openwall.com/lists/oss-security/2024/02/03/1
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 Patch
https://gitee.com/src-openeuler/kernel/pulls/1389 Release Notes
https://gitee.com/src-openeuler/kernel/pulls/1396 Release Notes
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034 Vendor Advisory
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:huawei:openeuler:*:*:*:*:-:-:*:*
cpe:2.3:o:huawei:openeuler:*:*:*:*:-:linux:*:*
cpe:2.3:o:huawei:openeuler:*:*:*:*:-:-:*:*
History

03 Feb 2024, 03:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/02/03/1 -

03 Feb 2024, 00:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/02/02/9 -

02 Feb 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/02/02/6 -

31 Jan 2024, 15:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/31/2 -
  • () http://www.openwall.com/lists/oss-security/2024/01/31/3 -

31 Jan 2024, 00:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/10 -
  • () http://www.openwall.com/lists/oss-security/2024/01/30/9 -

30 Jan 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/5 -

30 Jan 2024, 15:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/3 -
  • () http://www.openwall.com/lists/oss-security/2024/01/30/4 -

26 Jan 2024, 18:52

Type Values Removed Values Added
CPE cpe:2.3:o:huawei:openeuler:*:*:*:*:-:-:*:*
cpe:2.3:o:huawei:openeuler:*:*:*:*:-:linux:*:*
First Time Huawei
Huawei openeuler
References () https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 - () https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 - Patch
References () https://gitee.com/src-openeuler/kernel/pulls/1389 - () https://gitee.com/src-openeuler/kernel/pulls/1389 - Release Notes
References () https://gitee.com/src-openeuler/kernel/pulls/1396 - () https://gitee.com/src-openeuler/kernel/pulls/1396 - Release Notes
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034 - Vendor Advisory
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035 - Vendor Advisory
CVSS v2 : unknown
v3 : 5.5 		v2 : unknown
v3 : 7.8

26 Jan 2024, 09:15

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de desbordamiento de enteros o envoltura en el kernel openEuler en Linux (módulos del sistema de archivos) permite el desbordamiento de enteros forzado. Este problema afecta al kernel de openEuler: desde 4.19.90 antes de 4.19.90-2401.3, desde 5.10.0-60.18.0 antes de 5.10.0-183.0 .0.
References
  • () https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 -

18 Jan 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-18 15:15

Updated : 2024-02-03 03:15

NVD link : CVE-2021-33631

Mitre link : CVE-2021-33631

CVE.ORG link : CVE-2021-33631

JSON object : View

Products Affected

huawei

  • openeuler
CWE
CWE-190

Integer Overflow or Wraparound