CVE-2021-45485

01/תיאור (מקור, אנגלית)

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

02/מוצרים מושפעים

linux: linux kernel; netapp: e-series santricity os controller; netapp: solidfire\, enterprise sds \& hci storage node; netapp: solidfire \& hci management node; netapp: brocade fabric operating system firmware; oracle: communications cloud native core binding support function; oracle: communications cloud native core network exposure function; oracle: communications cloud native core policy; netapp: all flash fabric-attached storage 8300 firmware; netapp: all flash fabric-attached storage 8300; netapp: fabric-attached storage 8300 firmware; netapp: fabric-attached storage 8300; netapp: all flash fabric-attached storage 8700 firmware; netapp: all flash fabric-attached storage 8700; netapp: fabric-attached storage 8700 firmware

03/קישורים10

• cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 Release NotesVendor Advisory
• git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/com‮… PatchVendor Advisory
• cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 Release NotesVendor Advisory
• git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/com‮… PatchVendor Advisory
• www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
• www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
• arxiv.org/pdf/2112.09604.pdf Technical DescriptionThird Party Advisory
• security.netapp.com/advisory/ntap-20220121-0001/ Third Party Advisory
• arxiv.org/pdf/2112.09604.pdf Technical DescriptionThird Party Advisory
• security.netapp.com/advisory/ntap-20220121-0001/ Third Party Advisory