CVE-2021-3655

Public on 2021-08-04
Modified on 2021-10-04
Description
A vulnerability was found in the Linux kernel. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.
Severity
Medium severity
Medium
CVSS v3 Base Score
3.3
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 kernel 2021-09-30 ALAS-2021-1539 Fixed
Amazon Linux 2 - Core kernel 2021-08-04 ALAS2-2021-1696 Fixed
Amazon Linux 2 - Core kernel 2021-10-04 ALAS2-2021-1712 Fixed
Amazon Linux 2 - Kernel-5.10 Extra kernel 2022-01-20 ALAS2KERNEL-5.10-2022-004 Fixed
Amazon Linux 2 - Kernel-5.4 Extra kernel 2022-01-20 ALAS2KERNEL-5.4-2022-006 Fixed
Amazon Linux 2 - Kernel-5.4 Extra kernel 2022-01-20 ALAS2KERNEL-5.4-2022-008 Fixed
Amazon Linux 2 - Kernel-5.4 Extra kernel 2024-06-19 ALAS2KERNEL-5.4-2024-073 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD CVSSv2 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N
NVD CVSSv3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N