136 lines
5.2 KiB
JSON
136 lines
5.2 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"state": "PUBLISHED",
|
||
"cveId": "CVE-2021-3759",
|
||
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||
"assignerShortName": "redhat",
|
||
"dateUpdated": "2026-10-14T09:49:52.088Z",
|
||
"dateReserved": "2021-09-01T00:00:00.000Z",
|
||
"datePublished": "2022-08-23T00:00:00.000Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||
"shortName": "redhat",
|
||
"dateUpdated": "2022-12-22T00:00:00.000Z"
|
||
},
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability."
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "n/a",
|
||
"product": "kernel",
|
||
"versions": [
|
||
{
|
||
"version": "Fixed in Linux kernel 5.15-rc1",
|
||
"status": "affected"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1999675"
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/security/cve/CVE-2021-3759"
|
||
},
|
||
{
|
||
"url": "https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive%40gmail.com/"
|
||
},
|
||
{
|
||
"name": "[debian-lts-announce] 20221222 [SECURITY] [DLA 3244-1] linux-5.10 security update",
|
||
"tags": [
|
||
"mailing-list"
|
||
],
|
||
"url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
|
||
}
|
||
],
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"type": "CWE",
|
||
"lang": "en",
|
||
"description": "CWE-400 - Uncontrolled Resource Consumption",
|
||
"cweId": "CWE-400"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
},
|
||
"adp": [
|
||
{
|
||
"providerMetadata": {
|
||
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
||
"shortName": "CVE",
|
||
"dateUpdated": "2024-08-03T17:09:08.717Z"
|
||
},
|
||
"title": "CVE Program Container",
|
||
"references": [
|
||
{
|
||
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1999675",
|
||
"tags": [
|
||
"x_transferred"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/security/cve/CVE-2021-3759",
|
||
"tags": [
|
||
"x_transferred"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive%40gmail.com/",
|
||
"tags": [
|
||
"x_transferred"
|
||
]
|
||
},
|
||
{
|
||
"name": "[debian-lts-announce] 20221222 [SECURITY] [DLA 3244-1] linux-5.10 security update",
|
||
"tags": [
|
||
"mailing-list",
|
||
"x_transferred"
|
||
],
|
||
"url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"x_adpType": "supplier",
|
||
"providerMetadata": {
|
||
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
|
||
"shortName": "siemens-SADP",
|
||
"dateUpdated": "2026-10-14T09:49:52.088Z"
|
||
},
|
||
"affected": [
|
||
{
|
||
"vendor": "Siemens",
|
||
"product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
|
||
"versions": [
|
||
{
|
||
"status": "affected",
|
||
"version": "0",
|
||
"lessThan": "V1.1",
|
||
"versionType": "custom"
|
||
}
|
||
],
|
||
"defaultStatus": "unknown"
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
} |