Information Disclosure

2021-11-2800:40:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.043 Low

EPSS

Percentile

92.4%

JSON

kernel is vulnerable to information disclosure. The vulnerability exists in the transparent inter-process communication functionality in net/tipc/crypto.c, allowing an attacker to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.

CPENameOperatorVersion
kerneleq4.18.0__80.7.2.el8_0
kerneleq4.18.0__193.6.3.el8_2
kerneleq4.18.0__193.28.1.el8_2
kerneleq4.18.0__240.1.1.el8_3
kerneleq4.18.0__240.22.1.el8_3
kerneleq4.18.0__331.el8
kerneleq4.18.0__193.19.1.el8_2
kerneleq4.18.0__147.3.1.el8_1
kerneleq4.18.0__315.el8
kerneleq4.18.0__305.el8

Name	Operator	Version
kernel	eq	4.18.0__80.7.2.el8_0
kernel	eq	4.18.0__193.6.3.el8_2
kernel	eq	4.18.0__193.28.1.el8_2
kernel	eq	4.18.0__240.1.1.el8_3
kernel	eq	4.18.0__240.22.1.el8_3
kernel	eq	4.18.0__331.el8
kernel	eq	4.18.0__193.19.1.el8_2
kernel	eq	4.18.0__147.3.1.el8_1
kernel	eq	4.18.0__315.el8
kernel	eq	4.18.0__305.el8