CVE-2021-43429
HIGHCORTX-S3 Server - Denial of Service via mempool_destroy Lock Handling
Title source: llmDescription
A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a failture to release locks pool->lock.
References (2)
Core 2
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/Seagate/cortx-s3server/issues/1037
Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/Seagate/cortx-s3server/pull/1041
Scores
CVSS v3
7.5
EPSS
0.0086
EPSS Percentile
53.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-667
Status
published
Products (1)
seagate/cortx-s3_server
2021-11-07
Published
Apr 07, 2022
Tracked Since
Feb 18, 2026