CVE-2021-3802 — Improper Input Validation in Project Udisks

CWE-20 — Improper Input Validation6 documents6 sources
Severity
4.2MEDIUMNVD
EPSS
0.1%
top 70.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Udisks Project UdisksFedoraproject FedoraRedhat Enterprise Linux
Timeline
PublishedNov 29
Latest updateNov 30

Description

A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:HExploitability: 0.6 | Impact: 3.6

Affected Packages1 packages

Also affects: Fedora 34, Enterprise Linux 8.0

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-p3gq-xgj7-pfr7: A vulnerability found in udisks2↗2021-11-30
▶
CVEList
CVE-2021-3802: A vulnerability found in udisks2↗2021-11-29
▶
OSV
CVE-2021-3802: A vulnerability found in udisks2↗2021-11-29
▶

📋Vendor Advisories

2
Red Hat
udisks2: insecure defaults in user-accessible mount helpers allow for a DoS↗2021-09-13
▶
Debian
CVE-2021-3802: udisks2 - A vulnerability found in udisks2. This flaw allows an attacker to input a specia...↗2021
▶
CVE-2021-3802 — Improper Input Validation | cvebase