Upstream information
CVE-2021-1721 at MITRE
Description
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having moderate severity.
CVSS v2 Scores
| CVSS detail | National Vulnerability Database |
| Base Score | 4.3 |
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
| Access Vector | Network |
| Access Complexity | Medium |
| Authentication | None |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | Partial |
CVSS v3 Scores
| CVSS detail | National Vulnerability Database |
| Base Score | 6.5 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| Attack Vector | Network |
| Attack Complexity | Low |
| Privileges Required | None |
| User Interaction | Required |
| Scope | Unchanged |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | High |
| CVSSv3 Version | 3.1 |
No SUSE Bugzilla entries cross referenced.
No SUSE Security Announcements cross referenced.
List of released packages
| Product(s) | Fixed package version(s) | References |
| SUSE Liberty Linux 8 | aspnetcore-runtime-3.1 >= 3.1.12-1.el8_3
aspnetcore-runtime-5.0 >= 5.0.3-1.el8_3
aspnetcore-targeting-pack-3.1 >= 3.1.12-1.el8_3
aspnetcore-targeting-pack-5.0 >= 5.0.3-1.el8_3
dotnet >= 5.0.103-1.el8_3
dotnet-apphost-pack-3.1 >= 3.1.12-1.el8_3
dotnet-apphost-pack-5.0 >= 5.0.3-1.el8_3
dotnet-host >= 5.0.3-1.el8_3
dotnet-host-fxr-2.1 >= 2.1.25-1.el8_3
dotnet-hostfxr-3.1 >= 3.1.12-1.el8_3
dotnet-hostfxr-5.0 >= 5.0.3-1.el8_3
dotnet-runtime-2.1 >= 2.1.25-1.el8_3
dotnet-runtime-3.1 >= 3.1.12-1.el8_3
dotnet-runtime-5.0 >= 5.0.3-1.el8_3
dotnet-sdk-2.1 >= 2.1.521-1.el8_3
dotnet-sdk-2.1.5xx >= 2.1.521-1.el8_3
dotnet-sdk-3.1 >= 3.1.112-1.el8_3
dotnet-sdk-5.0 >= 5.0.103-1.el8_3
dotnet-targeting-pack-3.1 >= 3.1.12-1.el8_3
dotnet-targeting-pack-5.0 >= 5.0.3-1.el8_3
dotnet-templates-3.1 >= 3.1.112-1.el8_3
dotnet-templates-5.0 >= 5.0.103-1.el8_3
netstandard-targeting-pack-2.1 >= 5.0.103-1.el8_3
| Patchnames: RHSA-2021:0471 RHSA-2021:0474 RHSA-2021:0476 |
SUSE Timeline for this CVE
CVE page created: Tue Feb 9 19:56:08 2021
CVE page last modified: Mon Oct 6 19:27:58 2025