NetSight
IP …
high7.5

CVE-2021-45485

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, alth…

Impact

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.276
from 4.5 before 4.9.276
from 4.10 before 4.14.240
from 4.15 before 4.19.198
from 4.20 before 5.4.133
from 5.5 before 5.10.51
NetappE-Series Santricity Os Controller
All versions
NetappSolidfire\, Enterprise Sds \& Hci Storage Node
All versions
NetappSolidfire \& Hci Management Node
All versions
NetappBrocade Fabric Operating System Firmware
All versions
OracleCommunications Cloud Native Core Binding Support Function
Version 22.1.3
OracleCommunications Cloud Native Core Network Exposure Function
Version 22.1.1
OracleCommunications Cloud Native Core Policy
Version 22.2.0
NetappAll Flash Fabric-Attached Storage 8300 Firmware
All versions
NetappFabric-Attached Storage 8300 Firmware
All versions
NetappAll Flash Fabric-Attached Storage 8700 Firmware
All versions
NetappFabric-Attached Storage 8700 Firmware
All versions

Weakness classification

CWE-327

References