CVE-2021-28038

MEDIUM Year: 2021
CVSS v3 Score
6.5
Medium
CVSS v2 Score
4.9
Medium
Weakness Type
CWE-770
View all →

Vulnerability Description

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

Related Vulnerabilities

CVE-2017-11525

MEDIUM
CVSS:6.5(Medium)

The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CWE-7702017

CVE-2017-12432

MEDIUM
CVSS:6.5(Medium)

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service.

CWE-7702017

CVE-2017-12563

MEDIUM
CVSS:6.5(Medium)

In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.

CWE-7702017

CVE-2017-12643

MEDIUM
CVSS:6.5(Medium)

ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.

CWE-7702017

CVE-2017-12691

MEDIUM
CVSS:6.5(Medium)

The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CWE-7702017

CVE-2017-12692

MEDIUM
CVSS:6.5(Medium)

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file.

CWE-7702017