Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.1
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 19 |
| CVE-ID | CVE-2021-32672 CVE-2021-22922 CVE-2021-37750 CVE-2021-37576 CVE-2021-36222 CVE-2021-23841 CVE-2021-23840 CVE-2021-22924 CVE-2021-22923 CVE-2021-22543 CVE-2021-41099 CVE-2021-3656 CVE-2021-3653 CVE-2016-4658 CVE-2021-32675 CVE-2021-32687 CVE-2021-32628 CVE-2021-32627 CVE-2021-32626 |
| CWE-ID | CWE-125 CWE-611 CWE-476 CWE-787 CWE-20 CWE-295 CWE-522 CWE-119 CWE-190 CWE-264 CWE-416 CWE-122 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #10 is available. |
| Vulnerable software Subscribe |
Red Hat Advanced Cluster Management for Kubernetes Server applications / Other server solutions |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains information about 19 vulnerabilities.
1) Out-of-bounds read
EUVDB-ID: #VU57035
Risk: Low
CVSSv3.1:
CVE-ID: CVE-2021-32672
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition, related to Lua Debugger. A remote attacker can read random data from heap.
Install updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
2) XML External Entity injection
EUVDB-ID: #VU55148
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-22922
CWE-ID:
CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to insufficient validation of user-supplied XML input. A remote attacker can pass a specially crafted XML code to the affected application and view contents of arbitrary files on the system or initiate requests to external systems.
Successful exploitation of the vulnerability may allow an attacker to view contents of arbitrary file on the server or perform network scanning of internal and external infrastructure.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
3) NULL pointer dereference
EUVDB-ID: #VU56828
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-37750
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the Key Distribution Center (KDC) in kdc/do_tgs_req.c. A remote user can pass specially crafted data via the FAST inner body that lacks a server field, trigger a NULL pointer dereference error and perform a denial of service (DoS) attack.
Install updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
4) Out-of-bounds write
EUVDB-ID: #VU57101
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-37576
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
DescriptionThe vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to a boundary error in arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform. An attacker on KVM guest OS can cause host OS memory corruption via rtas_args.nargs and execute arbitrary code on the host OS.
Install updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
5) NULL pointer dereference
EUVDB-ID: #VU55287
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-36222
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5). A remote attacker can send a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
6) NULL pointer dereference
EUVDB-ID: #VU50740
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-23841
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error within the X509_issuer_and_serial_hash() function when parsing the issuer field in the X509 certificate. A remote attacker can supply a specially crafted certificate, trigger a NULL pointer dereference error and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
7) Input validation error
EUVDB-ID: #VU50745
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-23840
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input during EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate calls. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
8) Improper Certificate Validation
EUVDB-ID: #VU55146
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-22924
CWE-ID:
CWE-295 - Improper Certificate Validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to errors in the logic when the config matching function does not take "issuer cert" into account and it compares the involved paths case insensitively. A remote attacker can gain access to sensitive information on the system.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
9) Insufficiently protected credentials
EUVDB-ID: #VU55145
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-22923
CWE-ID:
CWE-522 - Insufficiently Protected Credentials
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to insufficiently protected credentials. A remote attacker can gain access to sensitive information on the target system.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
10) Buffer overflow
EUVDB-ID: #VU56018
Risk: Low
CVSSv3.1:
CVE-ID: CVE-2021-22543
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error in Linux kernel when handling VM_IO|VM_PFNMAP vmas in KVM. A local user can can bypass RO checks and cause the pages to get freed while still accessible by the VMM and guest. As a result, an attacker with the ability to start and control a VM to read/write random pages of memory, can trigger memory corruption and execute arbitrary code with elevated privileges.
Install updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
11) Integer overflow
EUVDB-ID: #VU57029
Risk: High
CVSSv3.1:
CVE-ID: CVE-2021-41099
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer overflow when handling untrusted input, if proto-max-bulk-len is manually configured to a non-default, very large value. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
12) Security restrictions bypass
EUVDB-ID: #VU56929
Risk: Low
CVSSv3.1:
CVE-ID: CVE-2021-3656
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a malicious guest to escalate privileges on the system.
The vulnerability exists due to improperly imposed security restrictions within the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest.The vulnerability allows the L2 guest to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
Install updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
13) Security restrictions bypass
EUVDB-ID: #VU56904
Risk: Low
CVSSv3.1:
CVE-ID: CVE-2021-3653
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a malicious guest to escalate privileges on the system.
The vulnerability exists due to improperly imposed security restrictions within the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest.
As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
Install updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
14) Use-after-free
EUVDB-ID: #VU57346
Risk: High
CVSSv3.1:
CVE-ID: CVE-2016-4658
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error, caused by using namespace nodes in XPointer ranges within the xpointer.c in libxml2. A remote attackers can pass specially crated XML document to he application, trigger a use-after-free error and execute arbitrary code on the system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
15) Input validation error
EUVDB-ID: #VU57034
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-32675
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when processing RESP request payloads with a large number of elements on many connections. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
16) Integer overflow
EUVDB-ID: #VU57031
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-32687
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer overflow when handling intsets, if set-max-intset-entries is manually configured to a non-default, very large value. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
17) Integer overflow
EUVDB-ID: #VU57032
Risk: High
CVSSv3.1:
CVE-ID: CVE-2021-32628
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer overflow when handling ziplist-encoded data types, when configuring a large, non-default value for hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
18) Integer overflow
EUVDB-ID: #VU57033
Risk: High
CVSSv3.1:
CVE-ID: CVE-2021-32627
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer overflow when handling streams, if configuring a non-default, large value for proto-max-bulk-len and client-query-buffer-limit. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
19) Heap-based buffer overflow
EUVDB-ID: #VU57036
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-32626
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing specially crafted Lua scripts. A remote attacker can pass specially crafted data to the application, trigger heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Red Hat Advanced Cluster Management for Kubernetes: 2.1.0 - 2.1.11
CPE2.3 External linkshttp://access.redhat.com/errata/RHSA-2021:3949
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
