[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZlmcVgcYgoXnDgxhxVhaudaDKcqXwyHcFGfihLGCIfA":3,"g5a-risk:CVE-2021-3905":147},{"success":4,"data":5,"meta":144},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":55,"references":56,"referencesCount":83,"weaknesses":84,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":26,"otxData":26,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":142,"notableEvents":143},"CVE-2021-3905","What is CVE-2021-3905?","A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.","A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available ...","2022-08-23T16:15:10.177","2023-11-26T11:15:08.147",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.01992,[29,29,29,29,29,29,29],"High",[33,37,42,45,50],{"vendor":34,"product":34,"version":35,"criteria":36,"vulnerable":4},"openvswitch","*","cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"redhat","enterprise_linux_fast_datapath","7.0","cpe:2.3:a:redhat:enterprise_linux_fast_datapath:7.0:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"8.0","cpe:2.3:a:redhat:enterprise_linux_fast_datapath:8.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"canonical","ubuntu_linux","21.10","cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"fedoraproject","fedora","35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",5,[57,62,67,72,75,79],{"url":58,"source":59,"tags":60},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2021-3905","Red Hat",[61],"Third Party Advisory",{"url":63,"source":59,"tags":64},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2019692",[65,66,61],"Issue Tracking","Patch",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fgithub.com\u002Fopenvswitch\u002Fovs-issues\u002Fissues\u002F226","GitHub",[71,65,66,61],"Exploit",{"url":73,"source":69,"tags":74},"https:\u002F\u002Fgithub.com\u002Fopenvswitch\u002Fovs\u002Fcommit\u002F803ed12e31b0377c37d7aa8c94b3b92f2081e349",[66,61],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202311-16","Gentoo",[],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fubuntu.com\u002Fsecurity\u002FCVE-2021-3905","Ubuntu",[66,61],6,[85],{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":92},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.","This is often triggered by improper handling of malformed data or unexpectedly interrupted sessions.  In some languages, developers are responsible for tracking memory allocation and releasing the memory.  If there are no more pointers or references to the memory, then it can no longer be tracked and identified for release.","Draft","Variant","Simple",1,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2021-3905? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-3905, a high severity cyber security vulnerability from 2022. A memory leak was found in Open vSwitch (OVS) during userspa...","CVE-2021-3905, CVE-2021-3905 vulnerability, CVE-2021-3905 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, openvswitch security, redhat security, canonical security, fedoraproject security, openvswitch vulnerability, enterprise_linux_fast_datapath vulnerability, ubuntu_linux vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2021-3905",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-3905","Cybersecurity","CVE-2021-3905, CVE-2021-3905 vulnerability, CVE-2021-3905 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122,130],{"Operator":26,"Negate":26,"Nodes":123},[124],{"Operator":125,"Negate":26,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":129,"VersionEndIncluding":26},"59369EE4-B970-4222-AA4E-276928B1016B","2.17.0",{"Operator":26,"Negate":26,"Nodes":131},[132],{"Operator":125,"Negate":26,"CPEMatch":133},[134,136,138,140],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"559A4609-EC7E-40CD-9165-5DA68CBCEE9B",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BAE5723C-165D-4427-A8DF-82662A2E7A9F",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AAE4D2D0-CEEB-416F-8BC5-A7987DF56190",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",[],[],{"lastModified":11,"cacheTime":145,"version":146},1792243340982,"2.0",{"score":148,"band":149,"action":150,"scoredAt":151},53,"Medium","Plan remediation","2026-10-16T06:55:30.070209+00:00"]