Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20210428-01-RACECONDITION
HistoryApr 28, 2021 - 12:00 a.m.

Security Advisory - Multiple Threads Race Condition Vulnerability in Huawei Product

2021-04-2800:00:00
Huawei Technologies
www.huawei.com
15

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.6%

There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker with the root permission can exploit this vulnerability by performing some operations. Successful exploitation of this vulnerability may cause the system to crash. (Vulnerability ID: HWPSIRT-2020-45761)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2021-22340.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

<http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-racecondition-en&gt;

Affected configurations

Vulners
Node
huaweifusioncomputeMatch8.0.0
OR
huaweifusioncomputeMatch8.0.rc3
OR
huaweimanageoneMatch6.5.0.spc100.b220
OR
huaweimanageoneMatch6.5.1.1.b010
OR
huaweimanageoneMatch6.5.1.1.b020
OR
huaweimanageoneMatch6.5.1.1.b030
OR
huaweimanageoneMatch6.5.1.1.b040
OR
huaweimanageoneMatch6.5.1.spc100.b050
OR
huaweimanageoneMatch6.5.1.spc101.b010
OR
huaweimanageoneMatch6.5.1.spc101.b040
OR
huaweimanageoneMatch6.5.1.spc200
OR
huaweimanageoneMatch6.5.1.spc200.b010
OR
huaweimanageoneMatch6.5.1.spc200.b030
OR
huaweimanageoneMatch6.5.1.spc200.b040
OR
huaweimanageoneMatch6.5.1.spc200.b050
OR
huaweimanageoneMatch6.5.1.spc200.b060
OR
huaweimanageoneMatch6.5.1.spc200.b070
OR
huaweimanageoneMatch6.5.1rc1.b060
OR
huaweimanageoneMatch6.5.1rc1.b070
OR
huaweimanageoneMatch6.5.1rc1.b080
OR
huaweimanageoneMatch6.5.1rc2.b010
OR
huaweimanageoneMatch6.5.1rc2.b020
OR
huaweimanageoneMatch6.5.1rc2.b030
OR
huaweimanageoneMatch6.5.1rc2.b040
OR
huaweimanageoneMatch6.5.1rc2.b060
OR
huaweimanageoneMatch6.5.1rc2.b070
OR
huaweimanageoneMatch6.5.1rc2.b080
OR
huaweimanageoneMatch6.5.1rc2.b090
OR
huaweimanageoneMatch8.0.0
OR
huaweimanageoneMatch8.0.1
OR
huaweimanageoneMatch8.0.rc2
OR
huaweimanageoneMatch8.0.rc3
OR
huaweifusionsphereMatch8.0.0
OR
huaweifusionsphereMatchv100r006c50spc200
OR
huaweifusionsphereMatchv100r006c50spc203
OR
huaweifusionsphereMatchv100r006c50spc210
OR
huaweifusionsphereMatchv100r006c50spc212
OR
huaweifusionsphereMatchv100r006c50sph218
OR
huaweismc2.0Matchv600r019c10spc700
OR
huaweismc2.0Matchv600r019c10spc702
OR
huaweismc2.0Matchv600r019c10spc703
OR
huaweismc2.0Matchv600r019c10spc800
OR
huaweismc2.0Matchv600r019c10spc900
OR
huaweismc2.0Matchv600r019c10spc910
OR
huaweismc2.0Matchv600r019c10spc920
OR
huaweismc2.0Matchv600r019c10spc921
OR
huaweismc2.0Matchv600r019c10spc922
OR
huaweismc2.0Matchv600r019c10spc930
OR
huaweismc2.0Matchv600r019c10spc931
OR
huaweismc2.0Matchv600r019c10spc932
OR
huaweismc2.0Matchv600r019c10spc933
OR
huaweismc2.0Matchv600r019c10spc940
OR
huaweismc2.0Matchv600r019c10spc950
OR
huaweismc2.0Matchv600r019c10spc951

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.6%

Related for HUAWEI-SA-20210428-01-RACECONDITION