CVE-2021-43267 Integer overflow in n/a

Critical 9.8 Published 2 Nov 2021 Updated 4 Aug 2024

Remote attackers can exploit insufficient size validation in TIPC crypto messages to cause denial of service or execute code.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2021-43267?

CVE-2021-43267 is a critical vulnerability in Fedoraproject Fedora, published on 2 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.

Weakness: CWE-1284

Which versions are affected by CVE-2021-43267?

It affects 9 products.

Linux distribution packages (27)

`kpatch-patch-4_18_0-348` Red Hat:enterprise_linux:8::baseos	All versions	`0:1-1.el8`
`kpatch-patch-4_18_0-348-debuginfo` Red Hat:enterprise_linux:8::baseos	All versions	`0:1-1.el8`
`kpatch-patch-4_18_0-348-debugsource` Red Hat:enterprise_linux:8::baseos	All versions	`0:1-1.el8`
`kpatch-patch-4_18_0-305` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-8.el8`
`kpatch-patch-4_18_0-305-debuginfo` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-8.el8`
`kpatch-patch-4_18_0-305-debugsource` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-8.el8`
`kpatch-patch-4_18_0-305_10_2` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-5.el8_4`
`kpatch-patch-4_18_0-305_10_2-debuginfo` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-5.el8_4`
`kpatch-patch-4_18_0-305_10_2-debugsource` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-5.el8_4`
`kpatch-patch-4_18_0-305_12_1` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-4.el8_4`
`kpatch-patch-4_18_0-305_12_1-debuginfo` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-4.el8_4`
`kpatch-patch-4_18_0-305_12_1-debugsource` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-4.el8_4`
`kpatch-patch-4_18_0-305_17_1` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-3.el8_4`
`kpatch-patch-4_18_0-305_17_1-debuginfo` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-3.el8_4`
`kpatch-patch-4_18_0-305_17_1-debugsource` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-3.el8_4`
`kpatch-patch-4_18_0-305_19_1` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-3.el8_4`
`kpatch-patch-4_18_0-305_19_1-debuginfo` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-3.el8_4`
`kpatch-patch-4_18_0-305_19_1-debugsource` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-3.el8_4`
`kpatch-patch-4_18_0-305_25_1` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-2.el8_4`
`kpatch-patch-4_18_0-305_25_1-debuginfo` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-2.el8_4`
`kpatch-patch-4_18_0-305_25_1-debugsource` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-2.el8_4`
`kpatch-patch-4_18_0-305_3_1` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-7.el8_4`
`kpatch-patch-4_18_0-305_3_1-debuginfo` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-7.el8_4`
`kpatch-patch-4_18_0-305_3_1-debugsource` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-7.el8_4`
`kpatch-patch-4_18_0-305_7_1` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-6.el8_4`
`kpatch-patch-4_18_0-305_7_1-debuginfo` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-6.el8_4`
`kpatch-patch-4_18_0-305_7_1-debugsource` Red Hat:rhel_eus:8.4::baseos	All versions	`0:1-6.el8_4`

Products include Fedoraproject Fedora, Linux kernel, Netapp H300e Firmware, Netapp H300s Firmware, Netapp H410s Firmware, Netapp H500e Firmware and 3 more.

How do I fix CVE-2021-43267?

Upgrade to a fixed version.

Is CVE-2021-43267 being exploited?

There is no known exploitation of CVE-2021-43267 in the wild and no public exploit code.

Public exploit code: 2 proofs of concept on GitHub.

All Fedoraproject Fedora vulnerabilities

Sources

Also known as A-205243414, AZL-6603, DEBIAN-CVE-2021-43267, GHSA-c22h-4v9p-5cx2, PUB-A-205243414, RHSA-2021:4644 and 2 more.