CVE编号
CVE-2021-3320利用情况
暂无补丁情况
N/A披露时间
2021-05-26漏洞描述
Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7解决建议
建议您更新当前系统或软件至最新版,完成漏洞的修复。
参考链接 |
|
---|---|
http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7 |
受影响软件情况
# | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
1 | |||||||||
---|---|---|---|---|---|---|---|---|---|
运行在以下环境 | |||||||||
系统 | amazon_AMI | kernel | * |
Up to (excluding) 4.14.238-125.421.amzn1 |
|||||
运行在以下环境 | |||||||||
系统 | centos_8 | kernel | * |
Up to (excluding) 4.18.0-348.el8 |
|||||
运行在以下环境 | |||||||||
系统 | fedora_33 | kernel | * |
Up to (excluding) 5.12.8-200.fc33 |
|||||
运行在以下环境 | |||||||||
系统 | fedora_34 | kernel | * |
Up to (excluding) 5.12.8-300.fc34 |
|||||
运行在以下环境 | |||||||||
系统 | fedora_35 | python3-django-doc | * |
Up to (excluding) 3.2.12-1.fc35 |
|||||
运行在以下环境 | |||||||||
系统 | fedora_36 | python3-django-doc | * |
Up to (excluding) 4.0.2-1.fc36 |
|||||
运行在以下环境 | |||||||||
系统 | opensuse_Leap_15.2 | kernel | * |
Up to (excluding) 5.3.18-lp152.78.1 |
|||||
运行在以下环境 | |||||||||
系统 | opensuse_Leap_15.3 | kernel | * |
Up to (excluding) 4.12.14-197.99.1 |
|||||
运行在以下环境 | |||||||||
系统 | oracle_8 | kernel | * |
Up to (excluding) 4.18.0-348.el8 |
|||||
运行在以下环境 | |||||||||
系统 | redhat_8 | kernel | * |
Up to (excluding) 4.18.0-348.el8 |
|||||
运行在以下环境 | |||||||||
系统 | suse_12_SP5 | kernel | * |
Up to (excluding) 4.12.14-16.59.1 |
|||||
运行在以下环境 | |||||||||
系统 | ubuntu_14.04.6_lts | linux | * |
Up to (excluding) 3.11.0-12.19 |
|||||
运行在以下环境 | |||||||||
系统 | ubuntu_18.04.5_lts | python-django | * |
Up to (excluding) 1:1.11.11-1ubuntu1.14 |
|||||
运行在以下环境 | |||||||||
系统 | zephyrproject | zephyr | * |
From (including) 2.0.0 |
Up to (including) 2.4.0 |
||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 无
- 完整性 无
还没有评论,来说两句吧...