CVE-2021-31571

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Apr 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-315729.8The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer.c for a stream buffer.CVE-2021-315739.8In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilegeCVE-2021-315749.8In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilegeCVE-2021-315759.8In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilegeCVE-2021-315767.5In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a CVE-2021-315779.8In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege froCVE-2021-315789.8In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from aCVE-2021-315799.8Akkadian Provisioning Manager Engine (PME) ships with a hard-coded credential, akkadianuser:haakkadianpassword. This issue was resolved in ACVE-2021-315809.8The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be bypassed by switching the OpenSSH channel from `shell` toCVE-2021-315814.4The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be escaped by abusing the 'Edit MySQL Configuration' commandCVE-2021-315835.4Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including platform version NGCP CE 3.0 has multiple authenticated stored and reflected XSSCVE-2021-315848.8Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with adm
CVE-2021-31571: Critical severity, CVSS 9.8 | Vulnix