Vulnerability Details : CVE-2021-33910

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

Published 2021-07-20 19:15:10

Updated 2022-06-14 11:15:09

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-33910

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 8 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2021-33910

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C	3.9	6.9	nvd@nist.gov
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	nvd@nist.gov
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-33910

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-33910

https://github.com/systemd/systemd/pull/20256/commits/441e0115646d54f080e5c3bb0ba477c892861ab9

basic/unit-name: do not use strdupa() on a path by keszybz · Pull Request #20256 · systemd/systemd · GitHub
Patch;Third Party Advisory
https://www.debian.org/security/2021/dsa-4942

Debian -- Security Information -- DSA-4942-1 systemd
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/

[SECURITY] Fedora 33 Update: systemd-246.15-1.fc33 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf

CVEs referencing this url
https://github.com/systemd/systemd-stable/commit/4a1c5f34bd3e1daed4490e9d97918e504d19733b

basic/unit-name: do not use strdupa() on a path · systemd/systemd-stable@4a1c5f3 · GitHub
Patch;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LSDMHAKI4LGFOCSPXNVVSEWQFAVFWR7/

[SECURITY] Fedora 34 Update: systemd-248.5-1.fc34 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/08/17/3

oss-security - Re: Pop!_OS Membership to linux-distros list
Mailing List;Patch;Third Party Advisory

CVEs referencing this url
https://github.com/systemd/systemd-stable/commit/cfd14c65374027b34dbbc4f0551456c5dc2d1f61

basic/unit-name: do not use strdupa() on a path · systemd/systemd-stable@cfd14c6 · GitHub
Patch;Third Party Advisory
https://github.com/systemd/systemd-stable/commit/b00674347337b7531c92fdb65590ab253bb57538

basic/unit-name: do not use strdupa() on a path · systemd/systemd-stable@b006743 · GitHub
Patch;Third Party Advisory
https://github.com/systemd/systemd/commit/b34a4f0e6729de292cb3b0c03c1d48f246ad896b

Merge pull request #20256 from keszybz/one-alloca-too-many · systemd/systemd@b34a4f0 · GitHub
Patch;Third Party Advisory
https://github.com/systemd/systemd-stable/commit/764b74113e36ac5219a4b82a05f311b5a92136ce

basic/unit-name: do not use strdupa() on a path · systemd/systemd-stable@764b741 · GitHub
Patch;Third Party Advisory
http://packetstormsecurity.com/files/163621/Sequoia-A-Deep-Root-In-Linuxs-Filesystem-Layer.html

Sequoia: A Deep Root In Linux's Filesystem Layer ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2021/09/07/3

oss-security - Re: Pop!_OS Membership to linux-distros list
Mailing List;Patch;Third Party Advisory

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2021/08/04/2

oss-security - Re: Pop!_OS Membership to linux-distros list
Mailing List;Patch;Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/202107-48

systemd: Multiple vulnerabilities (GLSA 202107-48) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://www.openwall.com/lists/oss-security/2021/07/20/2

oss-security - CVE-2021-33910: Denial of service (stack exhaustion) in systemd (PID 1)
Exploit;Mailing List;Third Party Advisory
https://security.netapp.com/advisory/ntap-20211104-0008/

CVE-2021-33910 Systemd Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory

Products affected by CVE-2021-33910

Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 33
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 34
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Matching versions
Netapp » Hci Management Node » Version: N/A
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
Matching versions
Netapp » Solidfire » Version: N/A
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
Matching versions
Systemd Project » Systemd
Versions from including (>=) 248 and before (<) 248.5
cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*
Matching versions
Systemd Project » Systemd
Versions from including (>=) 249 and before (<) 249.1
cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*
Matching versions
Systemd Project » Systemd
Versions before (<) 246.15
cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*
Matching versions
Systemd Project » Systemd
Versions from including (>=) 247 and before (<) 247.8
cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*
Matching versions