PT-2021-7066 · Linux+8 · Linux Kernel+8

Published 2021-08-26 · Updated 2023-11-09 · CVE-2021-20322

Positive Technologies (AI Summary)

CVSS v2.0

8.8

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the processing of received ICMP errors, specifically ICMP fragment needed and ICMP redirect, allows an off-path remote user to quickly scan open UDP ports and bypass the source port UDP randomization. This issue affects confidentiality and possibly integrity, as software relying on UDP source port randomization is indirectly affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

ALSA-2022:1988

ALT-PU-2021-3330

ALT-PU-2021-3358

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2021-3660

ALT-PU-2022-1079

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

ALT-PU-2023-4894

BDU:2022-03142

CESA-2022_1975

CESA-2022_1988

CVE-2021-20322

DLA-2843-1

DLA-2941-1

DSA-5096-1

OESA-2021-1429

OPENSUSE-SU-2021:1501-1

OPENSUSE-SU-2021:3806-1

OPENSUSE-SU-2021:3876-1

OPENSUSE-SU-2021:3941-1

OPENSUSE-SU-2021_1501-1

OPENSUSE-SU-2021_3806-1

OPENSUSE-SU-2021_3876-1

OPENSUSE-SU-2021_3941-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022:4829

RHSA-2022:4835

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2021:3806-1

SUSE-SU-2021:3807-1

SUSE-SU-2021:3848-1

SUSE-SU-2021:3876-1

SUSE-SU-2021:3877-1

SUSE-SU-2021:3929-1

SUSE-SU-2021:3933-1

SUSE-SU-2021:3935-1

SUSE-SU-2021:3941-1

SUSE-SU-2021:3969-1

SUSE-SU-2021:3972-1

SUSE-SU-2021:3978-1

SUSE-SU-2021:3979-1

SUSE-SU-2021:3992-1

SUSE-SU-2021:4021-1

SUSE-SU-2021:4038-1

SUSE-SU-2021:4057-1

SUSE-SU-2021:4075-1

SUSE-SU-2021:4090-1

SUSE-SU-2021:4099-1

SUSE-SU-2021_4057-1

SUSE-SU-2021_4075-1

USN-5268-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 431

• https://nvd.nist.gov/vuln/detail/CVE-2021-43389 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3876-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-20322 · Security Note
• https://osv.dev/vulnerability/ALSA-2022:1988 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:4038-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3941-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv4/route.c?h=v5.15-rc6&id=67d6d681e15b578c1725bad8ad079e05d1c48a8e · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=6457378fe796815c973f631a1904e147d6ee33b1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:4075-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1988 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-20322 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3935-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv6/route.c?h=v5.15-rc6&id=a00df2caffed3883c341d5685f830434312e4a43 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3848-1 · Vendor Advisory