Lucene search
MitreCVELIST:CVE-2021-36087HistoryJul 01, 2021 - 2:49 a.m.
CVE-2021-36087
2021-07-0102:49:55
mitre
www.cve.org
6
selinux cil compiler
heap-based buffer
over-read
ebitmap_match_any
cil_check_neverallow
invalid statements
The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.
References
bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675
github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-585.yaml
github.com/SELinuxProject/selinux/commit/340f0eb7f3673e8aacaf0a96cbfcd4d12a405521
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/
lore.kernel.org/selinux/CAEN2sdqJKHvDzPnxS-J8grU8fSf32DDtx=kyh84OsCq_Vm+yaQ%40mail.gmail.com/T/
Related
prion
prion
Heap overflow
2021-07-01 03:15:00
redhatcve
redhatcve
CVE-2021-36087
2021-07-06 17:15:42
cve
cve
CVE-2021-36087
2021-07-01 03:15:08
debiancve
debiancve
CVE-2021-36087
2021-07-01 03:15:08
nvd
nvd
CVE-2021-36087
2021-07-01 03:15:08
ubuntucve
ubuntucve
CVE-2021-36087
2021-07-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-12-10 07:26:10
nessus
nessus
Rocky Linux 8 : libsepol (RLSA-2021:4513)
2023-11-06 00:00:00
Oracle Linux 8 : libsepol (ELSA-2021-4513)
2021-11-17 00:00:00
Amazon Linux 2022 : (ALAS2022-2022-170)
2022-11-04 00:00:00
osv
osv
Moderate: libsepol security update
2021-11-09 09:39:50
Moderate: libsepol security update
2021-11-09 09:39:50
libsepol vulnerabilities
2022-04-27 09:32:18
openvas
openvas
Huawei EulerOS: Security Advisory for libsepol (EulerOS-SA-2022-1309)
2022-03-02 00:00:00
Fedora: Security Advisory for libsepol (FEDORA-2021-67efe88c29)
2021-11-16 00:00:00
Huawei EulerOS: Security Advisory for libsepol (EulerOS-SA-2022-1293)
2022-03-02 00:00:00
almalinux
almalinux
Moderate: libsepol security update
2021-11-09 09:39:50
oraclelinux
oraclelinux
libsepol security update
2021-11-16 00:00:00
ubuntu
ubuntu
libsepol vulnerabilities
2022-04-27 00:00:00
amazon
amazon
Medium: libsepol
2023-10-12 15:09:00
fedora
fedora
[SECURITY] Fedora 35 Update: libsepol-3.3-2.fc35
2021-11-15 05:48:45
rocky
rocky
libsepol security update
2021-11-09 09:39:50
cloudfoundry
cloudfoundry
USN-5391-1: libsepol vulnerabilities | Cloud Foundry
2022-05-23 00:00:00
redhat
redhat
(RHSA-2021:4513) Moderate: libsepol security update
2021-11-09 09:39:50
(RHSA-2022:5840) Moderate: Migration Toolkit for Containers (MTC) 1.7.3 security and bug fix update
2022-08-02 07:38:08
(RHSA-2022:0434) Moderate: Release of OpenShift Serverless 1.20.0
2022-02-03 17:07:25
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00