CVE-2021-37600 Integer overflow in n/a

What is CVE-2021-37600?

CVE-2021-37600 is a medium-severity vulnerability in Netapp Ontap Select Deploy Administration Utility, published on 28 Jul 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.

Weakness: CWE-190

Which versions are affected by CVE-2021-37600?

It affects 2 products.

Products include Kernel Util-Linux, Netapp Ontap Select Deploy Administration Utility.

How do I fix CVE-2021-37600?

Apply the vendor's patch.

Is CVE-2021-37600 being exploited?

There is no known exploitation of CVE-2021-37600 in the wild and no public exploit code.

Other vulnerabilities in Netapp Ontap Select Deploy Administration Utility

• CVE-2015-5224 Race condition in n/a Critical 9.8
• CVE-2018-7738 Command injection in n/a High 7.8
• CVE-2016-2779 Privilege escalation in n/a High 7.8
• CVE-2026-13595 Util-linux: util-linux: heap use-after-free in libblkid nested partition probing Medium 6.8
• CVE-2020-21583 Command injection in n/a Medium 6.7

All Netapp Ontap Select Deploy Administration Utility vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2021-37600, CLEANSTART-2026-VL94606, DEBIAN-CVE-2021-37600, GHSA-3jhw-vwp2-45mp, OESA-2021-1308, SUSE-SU-2021:3463-1 and 9 more.