NetSight
IP …
high7.4

CVE-2021-20322

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to q…

Impact

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.15 before 4.19.215
from 4.20 before 5.4.157
from 5.5 before 5.10.62
from 5.11 before 5.13.14
FedoraprojectFedora
Version 34
DebianDebian Linux
Versions 9.0, 10.0
NetappActive Iq Unified Manager
All versions
NetappE-Series Santricity Os Controller
from 11.0 through 11.70.1
NetappSolidfire\, Enterprise Sds \& Hci Storage Node
All versions
NetappSolidfire \& Hci Management Node
All versions
NetappFas Baseboard Management Controller Firmware
All versions
NetappAff Baseboard Management Controller Firmware
All versions
NetappAff A700s Firmware
All versions
NetappH700s Firmware
All versions
NetappH700e Firmware
All versions

Weakness classification

CWE-330

References