CVE-2021-20322

Fixed in a distro release EPSS 7%

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

Published 2022-02-18 · CVE record · OSV

Products: linux_kernel, fedoraproject fedora, debian_linux, netapp active_iq_unified_manager, netapp e-series_santricity_os_controller, netapp solidfire,_enterprise_sds_&_hci_storage_node, netapp solidfire_&_hci_management_node, netapp fas_baseboard_management_controller_firmware, netapp aff_baseboard_management_controller_firmware, netapp aff_a700s_firmware, netapp h700s_firmware, netapp h700e_firmware, netapp h500s_firmware, netapp h410s_firmware, netapp h500e_firmware, netapp h300e_firmware, netapp h300s_firmware, netapp hci_compute_node_firmware, oracle communications_cloud_native_core_binding_support_function, oracle communications_cloud_native_core_network_exposure_function, oracle communications_cloud_native_core_policy

Distro releases