CVE-2021-47574 - Vulnerability Details - OpenCVE

ReportizFlow

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2024061914-CVE-2021-47574-18b4@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47574
https://www.cve.org/CVERecord?id=CVE-2021-47574

History

Wed, 27 Nov 2024 02:30:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`	cvssV3_1 `{'score': 0.0, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N'}` threat_severity `None`

MITRE

Status: REJECTED

Assigner: Linux

Published: 2024-06-19T14:53:43.145Z

Updated: 2024-06-20T08:24:47.535Z

Reserved: 2024-05-24T15:11:00.729Z

Link: CVE-2021-47574

Vulnrichment

No data.

NVD

Status : Rejected

Published: 2024-06-19T15:15:51.890

Modified: 2024-06-20T09:15:10.850

Link: CVE-2021-47574

Redhat

Severity :

Publid Date: 2024-06-19T00:00:00Z

Links: CVE-2021-47574 - Bugzilla

{"bugzilla": {"description": "kernel: xen/netfront: harden netfront against event channel storms", "id": "2293260", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293260"}, "csaw": false, "cvss3": {"cvss3_base_score": "0.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N", "status": "draft"}, "cwe": "CWE-400", "details": ["[REJECTED CVE] The Xen netfront driver in the Linux kernel was vulnerable to attacks via an excessive number of events sent by the backend, leading to event channel storms."], "name": "CVE-2021-47574", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-06-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-47574\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-47574\nhttps://lore.kernel.org/linux-cve-announce/2024061914-CVE-2021-47574-18b4@gregkh/T"], "statement": "This CVE has been rejected upstream:\nhttps://lore.kernel.org/linux-cve-announce/2024062051-REJECTED-5985@gregkh/\nRed Hat has also evaluated this issue and determined that it does not meet the criteria to be classified as a security vulnerability. This assessment is based on the issue not posing a significant security risk, being a result of misconfiguration or usage error, or falling outside the scope of security considerations. \nAs such, this CVE has been marked as \"Rejected\" in alignment with Red Hat's vulnerability management policies.\nIf you have additional information or concerns regarding this determination, please contact Red Hat Product Security for further clarification.", "upstream_fix": "kernel 4.4.296, kernel 4.9.294, kernel 4.14.259, kernel 4.19.222, kernel 5.4.168, kernel 5.10.88, kernel 5.15.11, kernel 5.16"}