HIGH🇬🇧 English

CVE-2021-38575

CVSS 8.1v3.1pub. 2021-12-01upd. 2025-11-03

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Insyde Kernel

    OS
    Insyde
    5.05.15.25.35.45.5

  • Tianocore Edk2

    APP
    Tianocore
    ≤ 202105
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2024-52880HIGH7.9ten sam produkt

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...

CVE-2024-25078HIGH7.4ten sam produkt

A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB191301...

CVE-2023-45234HIGH8.3ten sam produkt

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option fr...

CVE-2023-45232HIGH7.5ten sam produkt

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the De...

CVE-2023-45230HIGH8.3ten sam produkt

EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6...