Vulnerability Intelligence Report
CVE-2021-3744
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.
No Active Exploit Signals
CVSS Base Score
5.5
MEDIUM
EPSS Probability:0.54%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-401 ↗CWE-401
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| linux | linux_kernel | 5.15 |
| fedoraproject | fedora | 33, 34, 35 |
| debian | debian_linux | 9.0, 10.0 |
| redhat | build_of_quarkus | 2.0 |
| redhat | codeready_linux_builder | 8.0 |
| redhat | codeready_linux_builder_eus | 8.6 |
| redhat | codeready_linux_builder_for_power_little_endian | 8.0 |
| redhat | codeready_linux_builder_for_power_little_endian_eus | 8.6 |
| redhat | developer_tools | 1.0 |
| redhat | enterprise_linux_eus | 8.6 |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 8.6 |
| redhat | enterprise_linux_for_power_little_endian_eus | 8.6 |
| redhat | enterprise_linux_for_real_time | 8, 8.6 |
| redhat | enterprise_linux_for_real_time_for_nfv | 8 |
| redhat | enterprise_linux_for_real_time_for_nfv_tus | 8.6 |
| redhat | enterprise_linux_server_eus | 8.6 |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 8.6 |
| redhat | enterprise_linux_server_tus | 8.6 |
| redhat | enterprise_linux_server_update_services_for_sap_solutions | 8.6 |
| redhat | virtualization_host | 4.0 |
| redhat | enterprise_linux | 8.0 |
| oracle | communications_cloud_native_core_binding_support_function | 22.1.3 |
| oracle | communications_cloud_native_core_network_exposure_function | 22.1.1 |
| oracle | communications_cloud_native_core_policy | 22.2.0 |
Threat Intelligence Signals
EPSS Score
0.537%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2021-08-27T00:00:00 |
| Published | 2022-03-04T15:55:17 |
| Last Updated | 2024-08-03T17:01:08 |
Community Chatter & Buzz