CVE-2021-20291: fedoraproject fedora Improper Locking

Modified

AliasesRHBA-2022:0348RHSA-2021:1150UBUNTU-CVE-2021-20291+3 more

Published 01-04-2021Last modified 03-08-2024

Vulnerability summary

CVE-2021-20291 is a high (CVSS 7.1) Improper Locking vulnerability in fedoraproject fedora. EPSS estimates a 1.59% chance of exploitation in the next 30 days, higher than 75.6% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 6.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.1/10

010

High · v2.0 (NVD)

EPSS score

1.59%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 10 · Related 4

MGASA-2023-0213 OPENSUSE-SU-2022:23018-1 OPENSUSE-SU-2024:11757-1 RHSA-2021:2437 RHSA-2021:4154 RHSA-2022:7954+4 more

Timeline

01-04-2021
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).

CVSS metrics

6 scores · 5 sources · 2 versions

v3.16.5v2.07.1

EPSS trend

Probability

1.59%

Chance of exploitation in the next 30 days

Percentile

76%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.59% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (unit42.paloaltonetworks.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-667Improper LockingThe product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat65 products

enterprise_linux8.0
openshift_container_platform4.0
buildah< 0:1.19.9-1.module+el8.5.0+12236+c988d830
buildah-debuginfo< 0:1.19.9-1.module+el8.5.0+12236+c988d830
buildah-debugsource< 0:1.19.9-1.module+el8.5.0+12236+c988d830

buildah-tests< 0:1.19.9-1.module+el8.5.0+12236+c988d830
buildah-tests-debuginfo< 0:1.19.9-1.module+el8.5.0+12236+c988d830
cockpit-podman< 0:29-2.module+el8.5.0+10306+3f72d66d
conmon< 2:2.0.26-1.module+el8.5.0+10306+3f72d66d
conmon-debuginfo< 2:2.0.26-1.module+el8.5.0+10306+3f72d66d
conmon-debugsource< 2:2.0.26-1.module+el8.5.0+10306+3f72d66d
container-selinux< 2:2.167.0-1.module+el8.5.0+12609+beaa716d
containernetworking-plugins< 0:0.9.1-1.module+el8.5.0+10306+3f72d66d
containernetworking-plugins-debuginfo< 0:0.9.1-1.module+el8.5.0+10306+3f72d66d
containernetworking-plugins-debugsource< 0:0.9.1-1.module+el8.5.0+10306+3f72d66d
containers-common< 1:1.2.4-1.module+el8.5.0+13605+73abf821
cri-o< 0:1.20.2-6.rhaos4.7.gitf1d5201.el7 | < 0:1.20.2-6.rhaos4.7.gitf1d5201.el8
cri-o-debuginfo< 0:1.20.2-6.rhaos4.7.gitf1d5201.el7 | < 0:1.20.2-6.rhaos4.7.gitf1d5201.el8
cri-o-debugsource< 0:1.20.2-6.rhaos4.7.gitf1d5201.el8
crit< 0:3.15-1.module+el8.5.0+10306+3f72d66d
criu< 0:3.15-1.module+el8.5.0+10306+3f72d66d
criu-debuginfo< 0:3.15-1.module+el8.5.0+10306+3f72d66d
criu-debugsource< 0:3.15-1.module+el8.5.0+10306+3f72d66d
crun< 0:0.18-2.module+el8.5.0+10306+3f72d66d
crun-debuginfo< 0:0.18-2.module+el8.5.0+10306+3f72d66d
crun-debugsource< 0:0.18-2.module+el8.5.0+10306+3f72d66d
fuse-overlayfs< 0:1.4.0-2.module+el8.5.0+10306+3f72d66d
fuse-overlayfs-debuginfo< 0:1.4.0-2.module+el8.5.0+10306+3f72d66d
fuse-overlayfs-debugsource< 0:1.4.0-2.module+el8.5.0+10306+3f72d66d
libslirp< 0:4.3.1-1.module+el8.5.0+10306+3f72d66d
libslirp-debuginfo< 0:4.3.1-1.module+el8.5.0+10306+3f72d66d
libslirp-debugsource< 0:4.3.1-1.module+el8.5.0+10306+3f72d66d
libslirp-devel< 0:4.3.1-1.module+el8.5.0+10306+3f72d66d
oci-seccomp-bpf-hook< 0:1.2.0-3.module+el8.5.0+11073+ba5c6d09
oci-seccomp-bpf-hook-debuginfo< 0:1.2.0-3.module+el8.5.0+11073+ba5c6d09
oci-seccomp-bpf-hook-debugsource< 0:1.2.0-3.module+el8.5.0+11073+ba5c6d09
openshift< 0:4.7.0-202104090228.p0.git.97111.77863f8.el7 | < 0:4.7.0-202104090228.p0.git.97111.77863f8.el8
openshift-hyperkube< 0:4.7.0-202104090228.p0.git.97111.77863f8.el7 | < 0:4.7.0-202104090228.p0.git.97111.77863f8.el8
podman< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-catatonit< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-catatonit-debuginfo< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-debuginfo< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-debugsource< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-docker< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-plugins< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-plugins-debuginfo< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-remote< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-remote-debuginfo< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
podman-tests< 0:3.0.1-7.module+el8.5.0+12960+5b7d72b5
python3-criu< 0:3.15-1.module+el8.5.0+10306+3f72d66d
runc< 0:1.0.0-72.rc92.module+el8.5.0+12236+c988d830
runc-debuginfo< 0:1.0.0-72.rc92.module+el8.5.0+12236+c988d830
runc-debugsource< 0:1.0.0-72.rc92.module+el8.5.0+12236+c988d830
skopeo< 1:1.2.4-1.module+el8.5.0+13605+73abf821
skopeo-debuginfo< 1:1.2.4-1.module+el8.5.0+13605+73abf821
skopeo-debugsource< 1:1.2.4-1.module+el8.5.0+13605+73abf821
skopeo-tests< 1:1.2.4-1.module+el8.5.0+13605+73abf821
slirp4netns< 0:1.1.8-1.module+el8.5.0+10306+3f72d66d
slirp4netns-debuginfo< 0:1.1.8-1.module+el8.5.0+10306+3f72d66d
slirp4netns-debugsource< 0:1.1.8-1.module+el8.5.0+10306+3f72d66d
toolbox< 0:0.0.99.3-1.module+el8.5.0+13746+87221ce8
toolbox-debuginfo< 0:0.0.99.3-1.module+el8.5.0+13746+87221ce8
toolbox-debugsource< 0:0.0.99.3-1.module+el8.5.0+13746+87221ce8
toolbox-tests< 0:0.0.99.3-1.module+el8.5.0+13746+87221ce8
udica< 0:0.2.4-1.module+el8.5.0+10306+3f72d66d

Show all 65

Debian1 product

golang-github-containers-storage< 1.34.1+ds1-1

Fedoraproject1 product

fedoraEOL33 | 34

Github.com/containers1 product

storage< 1.28.1

Storage_project1 product

storage< 1.28.1

Ubuntu1 product

golang-github-containers-storageAll versions (No fix recorded)

6 vendors · 70 products

References

27 links

bugzilla.redhat.com/show_bug.cgi?id=1939485X Refsource MISCREPORTWEBIssue TrackingPatchThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
unit42.paloaltonetworks.com/cve-2021-20291/X Refsource MISCARTICLEExploitThird Party Advisory
access.redhat.com/errata/RHBA-2022:0348Advisory
bugzilla.redhat.com/show_bug.cgi?id=2036929REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_0348.jsonAdvisory
access.redhat.com/security/cve/CVE-2021-20291REPORT

Show all 27 references