Out-of-bounds read in VMware ESXi - CVE-2021-21995
Published: July 13, 2021
Vulnerability identifier: #VU54816
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-21995
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition when processing requests within the OpenSLP service. A remote attacker can send a specially crafted request to port 427/UDP, trigger a heap out-of-bounds read and perform a denial of service attack.
Affected software
VMware ESXi
IBM Cloud Pak System
Cloud Foundation
Dell Enterprise Hybrid Cloud
Dell EMC VxRail Appliance
IBM Cloud Pak System
Cloud Foundation
Dell Enterprise Hybrid Cloud
Dell EMC VxRail Appliance
How to mitigate CVE-2021-21995
Install updates from vendor's website.
VMware ESXi - addressed in versions ESXi650-202107401-SG, ESXi670-202103101-SG, ESXi70U2-17630552
IBM Cloud Pak System - update to 2.3.3.4
Cloud Foundation - update to 3.10.2
Dell Enterprise Hybrid Cloud - update to 4.1.2
Dell EMC VxRail Appliance - update to 4.5.462
IBM Cloud Pak System - update to 2.3.3.4
Cloud Foundation - update to 3.10.2
Dell Enterprise Hybrid Cloud - update to 4.1.2
Dell EMC VxRail Appliance - update to 4.5.462