CVE-2021-43429

A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a failture to release locks pool->lock.
References
Link Resource
https://github.com/Seagate/cortx-s3server/issues/1037 Exploit Issue Tracking Third Party Advisory
https://github.com/Seagate/cortx-s3server/pull/1041 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:seagate:cortx-s3_server:2021-11-07:*:*:*:*:*:*:*

History

15 Apr 2022, 14:15

Type Values Removed Values Added
First Time Seagate
Seagate cortx-s3 Server
CWE CWE-667
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
References (MISC) https://github.com/Seagate/cortx-s3server/issues/1037 - (MISC) https://github.com/Seagate/cortx-s3server/issues/1037 - Exploit, Issue Tracking, Third Party Advisory
References (MISC) https://github.com/Seagate/cortx-s3server/pull/1041 - (MISC) https://github.com/Seagate/cortx-s3server/pull/1041 - Issue Tracking, Third Party Advisory
CPE cpe:2.3:a:seagate:cortx-s3_server:2021-11-07:*:*:*:*:*:*:*

07 Apr 2022, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-04-07 17:15

Updated : 2023-12-10 14:22


NVD link : CVE-2021-43429

Mitre link : CVE-2021-43429

CVE.ORG link : CVE-2021-43429


JSON object : View

Products Affected

seagate

  • cortx-s3_server
CWE
CWE-667

Improper Locking