Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2021-47347 Details

Description

In the Linux kernel, the following vulnerability has been resolved: wl1251: Fix possible buffer overflow in wl1251_cmd_scan Function wl1251_cmd_scan calls memcpy without checking the length. Harden by checking the length is within the maximum allowed size.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/0f6c0488368c9ac1aa685821916fadba32f5d1ef kernel.orgPatch
https://git.kernel.org/stable/c/115103f6e3f1c26c473766c16439c7c8b235529a kernel.orgPatch
https://git.kernel.org/stable/c/302e2ee34c5f7c5d805b7f835d9a6f2b43474e2a kernel.orgPatch
https://git.kernel.org/stable/c/40af3960a15339e8bbd3be50c3bc7b35e1a0b6ea kernel.orgPatch
https://git.kernel.org/stable/c/57ad99ae3c6738ba87bad259bb57c641ca68ebf6 kernel.orgPatch

see all 18 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CISA-ADP

Affected Products

ProductVersions
linux linux kernel
< 4.4.276
>= 4.5, < 4.9.276
>= 4.10, < 4.14.240
>= 4.15, < 4.19.198
>= 4.20, < 5.4.133

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2021-47347
NVD Published Date:
May 21, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2021-47347 Details - Not Deferred