CVE-2021-20322

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

• linux linux kernel (>= 4.15 < 4.19.215) • linux linux kernel (>= 4.20 < 5.4.157) • linux linux kernel (>= 5.5 < 5.10.62) • linux linux kernel (>= 5.11 < 5.13.14) • fedoraproject fedora 34 • debian debian linux 9.0 • debian debian linux 10.0 • netapp active iq unified manager • netapp e-series santricity os controller (>= 11.0 <= 11.70.1) • netapp solidfire\, enterprise sds \& hci storage node • netapp solidfire \& hci management node • netapp fas baseboard management controller firmware • netapp aff baseboard management controller firmware • netapp aff a700s firmware • netapp h700s firmware • netapp h700e firmware • netapp h500s firmware • netapp h410s firmware • netapp h500e firmware • netapp h300e firmware • netapp h300s firmware • netapp hci compute node firmware • oracle communications cloud native core binding support function 22.1.3 • oracle communications cloud native core network exposure function 22.1.1 • oracle communications cloud native core policy 22.2.0