CVE-2021-3744

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

No affected versions have been published.

Timeline

Published: Mar 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-374406.5NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.CVE-2021-374418.8NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.CVE-2021-374426.5NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.CVE-2021-374438.1NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.CVE-2021-374448.8NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to co CVE-2021-374456.5In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.CVE-2021-374464.3In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.CVE-2021-374478.1In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.CVE-2021-374485.4Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).CVE-2021-374495.4Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).CVE-2021-37456.6flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type CVE-2021-374505.4Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).