Vulnerability-Lookup

CVE-2021-37750 (GCVE-0-2021-37750)

Vulnerability from cvelistv5 – Published: 2021-08-23 00:00 – Updated: 2024-08-04 01:30

Summary

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://web.mit.edu/kerberos/advisories/
https://github.com/krb5/krb5/releases
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://www.oracle.com/security-alerts/cpujul2022.html
https://github.com/krb5/krb5/commit/d775c95af7606…
https://security.netapp.com/advisory/ntap-2021092…
https://www.starwindsoftware.com/security/sw-2022…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T01:30:08.497Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://web.mit.edu/kerberos/advisories/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/krb5/krb5/releases"
          },
          {
            "name": "FEDORA-2021-f2c8514f02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/"
          },
          {
            "name": "[debian-lts-announce] 20210930 [SECURITY] [DLA 2771-1] krb5 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210923-0002/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.starwindsoftware.com/security/sw-20220817-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-11T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://web.mit.edu/kerberos/advisories/"
        },
        {
          "url": "https://github.com/krb5/krb5/releases"
        },
        {
          "name": "FEDORA-2021-f2c8514f02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/"
        },
        {
          "name": "[debian-lts-announce] 20210930 [SECURITY] [DLA 2771-1] krb5 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "url": "https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20210923-0002/"
        },
        {
          "url": "https://www.starwindsoftware.com/security/sw-20220817-0004/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-37750",
    "datePublished": "2021-08-23T00:00:00.000Z",
    "dateReserved": "2021-07-30T00:00:00.000Z",
    "dateUpdated": "2024-08-04T01:30:08.497Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-37750",
      "date": "2026-09-21",
      "epss": "0.02166",
      "percentile": "0.81235"
    },
    "microsoft_vex": {
      "current_release_date": "2021-12-16T00:00:00.000Z",
      "cve": "CVE-2021-37750",
      "id": "msrc_CVE-2021-37750",
      "initial_release_date": "2021-08-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.",
      "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2021-37750.json",
      "version": "2"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF5D8B08-B0D6-4586-90E9-699344F5FDF5",
                    "versionEndExcluding": "1.18.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "500DB7B1-F8ED-4C89-8CDE-26DD02CB5A18",
                    "versionEndExcluding": "1.19.3",
                    "versionStartIncluding": "1.19.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8r13:14338:*:*:*:*:*:*",
                    "matchCriteriaId": "69561727-6405-4EAF-905E-6D5C9761E6EB",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6577F14-36B6-46A5-A1B1-FCCADA61A23B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field."
          },
          {
            "lang": "es",
            "value": "El Centro de Distribuci\u00f3n de Claves (KDC) en MIT Kerberos 5 (tambi\u00e9n se conoce como krb5) versiones anteriores a 1.18.5 y 1.19.x versiones anteriores a  1.19.3, presenta una desreferencia de puntero NULL en el archivo kdc/do_tgs_req.c por medio de un cuerpo interno FAST que carece de un campo de servidor."
          }
        ],
        "id": "CVE-2021-37750",
        "lastModified": "2024-11-21T06:15:52.080",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 4.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2021-08-23T05:15:08.063",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Release Notes",
              "Third Party Advisory"
            ],
            "url": "https://github.com/krb5/krb5/releases"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210923-0002/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://web.mit.edu/kerberos/advisories/"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.starwindsoftware.com/security/sw-20220817-0004/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Release Notes",
              "Third Party Advisory"
            ],
            "url": "https://github.com/krb5/krb5/releases"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MFCLW7D46E4VCREKKH453T5DA4XOLHU2/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210923-0002/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://web.mit.edu/kerberos/advisories/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Third Party Advisory"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.starwindsoftware.com/security/sw-20220817-0004/"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-476"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T21:40:19+00:00",
      "cve": "CVE-2021-37750",
      "id": "CVE-2021-37750",
      "initial_release_date": "2021-08-19T00:00:00+00:00",
      "product_status:fixed": "159",
      "product_status:known_not_affected": "19",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-37750.json",
      "version": "3"
    }
  }
}

SUSE-SU-2022:4154-1

Vulnerability from csaf_suse - Published: 2022-11-21 13:35 - Updated: 2026-09-20 14:46

Summary

Security update for krb5

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2021-37750.

CVE-2021-37750

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 132 products

Open the full advisory

SUSE-SU-2024:1702-1

Vulnerability from csaf_suse - Published: 2024-05-20 18:09 - Updated: 2026-09-20 15:50

Summary

Security update for krb5

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2021-37750.

CVE-2021-37750

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 42 products

Open the full advisory

UBUNTU-CVE-2021-37750 (CVE-2021-37750)

Vulnerability from osv_ubuntu – Published: 2021-08-23 05:15 – Updated: 2026-04-22 07:40 – Source website

Details

Severity

6.5 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2021-37750	REPORT
	https://github.com/krb5/krb5/releases	REPORT
	https://web.mit.edu/kerberos/advisories/	REPORT
	https://ubuntu.com/security/notices/USN-5959-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2021-37750	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "krb5-admin-server",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-gss-samples",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-k5tls",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-kdc",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-kdc-ldap",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-kpropd",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-locales",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-multidev",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-otp",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-pkinit",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "krb5-user",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libgssapi-krb5-2",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libgssrpc4",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libk5crypto3",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libkadm5clnt-mit11",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libkadm5srv-mit11",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libkdb5-9",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libkrad0",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libkrb5-3",
            "binary_version": "1.16-2ubuntu0.4"
          },
          {
            "binary_name": "libkrb5support0",
            "binary_version": "1.16-2ubuntu0.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "krb5",
        "purl": "pkg:deb/ubuntu/krb5@1.16-2ubuntu0.4?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.16-2ubuntu0.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.15.1-2",
        "1.16-2",
        "1.16-2build1",
        "1.16-2ubuntu0.1",
        "1.16-2ubuntu0.2",
        "1.16-2ubuntu0.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "krb5-admin-server",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-gss-samples",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-k5tls",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-kdc",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-kdc-ldap",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-kpropd",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-locales",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-multidev",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-otp",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-pkinit",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "krb5-user",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libgssapi-krb5-2",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libgssrpc4",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libk5crypto3",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libkadm5clnt-mit11",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libkadm5srv-mit11",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libkdb5-9",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libkrad0",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libkrb5-3",
            "binary_version": "1.17-6ubuntu4.3"
          },
          {
            "binary_name": "libkrb5support0",
            "binary_version": "1.17-6ubuntu4.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "krb5",
        "purl": "pkg:deb/ubuntu/krb5@1.17-6ubuntu4.3?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.17-6ubuntu4.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.17-6",
        "1.17-6ubuntu3",
        "1.17-6ubuntu4",
        "1.17-6ubuntu4.1",
        "1.17-6ubuntu4.2"
      ]
    }
  ],
  "aliases": [],
  "details": "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.",
  "id": "UBUNTU-CVE-2021-37750",
  "modified": "2026-04-22T07:40:06Z",
  "published": "2021-08-23T05:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-37750"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/krb5/krb5/releases"
    },
    {
      "type": "REPORT",
      "url": "https://web.mit.edu/kerberos/advisories/"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5959-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37750"
    }
  ],
  "related": [
    "USN-5959-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2021-37750"
  ]
}

WID-SEC-W-2022-0676

Vulnerability from csaf_certbund - Published: 2022-07-13 22:00 - Updated: 2023-01-11 23:00

Summary

Juniper Junos Space: Mehrere Schwachstellen

Severity

Hoch

Scope

33 vulnerabilities in this advisory, including CVE-2021-37750.

CVE-2021-37750

In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu verändern, seine Privilegien zu erweitern und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erhöhte Privilegien.

Known affected: 1 product

Open the full advisory

WID-SEC-W-2023-0561

Vulnerability from csaf_certbund - Published: 2023-03-02 23:00 - Updated: 2023-05-18 22:00

Summary

Xerox FreeFlow Print Server: Mehrere Schwachstellen

Severity

Hoch

Scope

140 vulnerabilities in this advisory, including CVE-2021-37750.

CVE-2021-37750

In Xerox FreeFlow Print Server existieren mehrere Schwachstellen im Zusammenhang mit bekannten Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.

Known affected: 3 products

Open the full advisory

WID-SEC-W-2023-0678

Vulnerability from csaf_certbund - Published: 2021-08-23 22:00 - Updated: 2024-07-02 22:00

Summary

MIT Kerberos: Schwachstelle ermöglicht nicht spezifizierten Angriff

Severity

Mittel

Scope

1 vulnerability in this advisory, including CVE-2021-37750.

CVE-2021-37750

Es existiert eine Schwachstelle in MIT Kerberos aufgrund einer NULL-Zeiger-Derefenzierung in "kdc/do_tgs_req.c". Ein Angreifer kann diese Schwachstelle ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.

Known affected: 9 products

Open the full advisory

WID-SEC-W-2023-1424

Vulnerability from csaf_certbund - Published: 2023-06-12 22:00 - Updated: 2025-10-06 22:00

Summary

Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen

Severity

Hoch

Scope

195 vulnerabilities in this advisory, including CVE-2021-37750.

CVE-2021-37750

Known affected: 2 products

Open the full advisory

WID-SEC-W-2025-0225

Vulnerability from csaf_certbund - Published: 2025-01-30 23:00 - Updated: 2025-10-01 22:00

Summary

Dell PowerProtect Data Domain: Mehrere Schwachstellen

Severity

Mittel

Scope

185 vulnerabilities in this advisory, including CVE-2021-37750.

CVE-2021-37750

Known affected: 12 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2021-37750 (GCVE-0-2021-37750)

SUSE-SU-2022:4154-1

SUSE-SU-2024:1702-1

UBUNTU-CVE-2021-37750 (CVE-2021-37750)

WID-SEC-W-2022-0676

WID-SEC-W-2023-0561

WID-SEC-W-2023-0678

WID-SEC-W-2023-1424

WID-SEC-W-2025-0225

Tags

Sightings

Nomenclature

Related by attack behaviour