CVE-2021-21296 - CVE House
Back to Database
Status published Low CVE-2021-21296

Denial-of-service in Fleet

Vulnerability Description

Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is currently ongoing. We believe the impact of this vulnerability to be low given the requirement that the actor has a valid node key. There is no information disclosure, privilege escalation, or code execution. The issue is fixed in Fleet 3.7.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-21296

Credits & Attribution

No credits recorded in the NVD database.

References

More from fleetdm

View All →
CVE-2025-27509
SAML authentication vulnerability due to improper SAML response validation
Critical 9.3
CVE-2022-24841
Improper Authorization in github.com/fleetdm/fleet
Medium 6.5
CVE-2022-23600
Limited ability to spoof SAML authentication with missing audience verification
Medium 5.3
CVE-2020-26276
SAML authentication vulnerability in Fleet
Critical 10

Affected Vendor

Affected Software

fleet
Vulnerable Versions:
< 3.7.0

Timeline

Official Publish: February 10th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-400

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact