CVE-2021-37625 Incorrect Check of Function Return Value in Skytable
Attackers can crash the Skytable database server by sending malformed TCP or TLS packets, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-37625?
CVE-2021-37625 is a high-severity denial of service vulnerability in skytable, published on 5 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Skytable is an open source NoSQL database. In versions prior to 0.6.4 an incorrect check of return value of the accept function in the run-loop for a TCP socket/TLS socket/TCP+TLS multi-socket causes an early exit from the run loop that should continue infinitely unless terminated by a local user, effectively causing the whole database server to shut down. This has severe impact and can be used to easily cause DoS attacks without the need to use much bandwidth. The attack vectors include using an incomplete TLS connection for example by not providing the certificate for the connection and using a specially crafted TCP packet that triggers the application layer backoff algorithm.
Which versions are affected by CVE-2021-37625?
It affects 1 product.
Products include Skytable Skytable.
How do I fix CVE-2021-37625?
No fix has been published for CVE-2021-37625 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-37625 being exploited?
There is no known exploitation of CVE-2021-37625 in the wild and no public exploit code.
Other vulnerabilities in skytable
Sources
Also known as GHSA-q27r-h25m-hcc7.