Use-after-free in tcpslice - CVE-2021-41043

Vulnerability identifier: #VU86208

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-41043

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in AddressSanitizer. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

tcpslice
Juniper Secure Analytics (JSA)
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
tcpdump (Red Hat package)
tcpdump
tcpdump-doc
Submariner
IBM Security Verify Governance
Red Hat OpenShift Container Platform
IBM Qradar SIEM

Install updates from vendor's website.

tcpslice - update to 1.5
Juniper Secure Analytics (JSA) - update to 7.5.0 UP8 IF03
Submariner - update to 0.18.5
tcpdump (Red Hat package) - addressed in versions 4.9.3-3.el8_8.1, 4.9.3-3.el8_9.1, 4.99.0-6.el9_2.1, 4.99.0-9.el9
tcpdump - update to 4.9.3-4.0.1
tcpdump-doc - update to 4.9.3-4.0.1
Red Hat OpenShift Container Platform - addressed in versions 4.16.15, 4.17.0
IBM Qradar SIEM - update to 7.5.0 Update Pack 8 IF01
IBM Security Verify Governance - update to 10.0.2.0.4

• https://github.com/the-tcpdump-group/tcpslice/issues/11

• Denial of service in tcpslice
• Red Hat Enterprise Linux 8.8 Extended Update Support update for tcpdump
• Red Hat Enterprise Linux 8 update for tcpdump
• Red Hat Enterprise Linux 9.2 Extended Update Support update for tcpdump
• Multiple vulnerabilities in IBM QRadar SIEM
• Red Hat Enterprise Linux 9 update for tcpdump
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Anolis OS update for tcpdump
• Multiple vulnerabilities in Submariner 0.18