Lucene search

@huntrdevCVELIST:CVE-2021-3756

HistoryOct 29, 2021 - 3:55 p.m.

CVE-2021-3756 Heap-based Buffer Overflow in hoene/libmysofa

2021-10-2915:55:10

CWE-122

@huntrdev

www.cve.org

libmysofa

cve-2021-3756

buffer overflow

heap-based

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

71.5%

JSON

libmysofa is vulnerable to Heap-based Buffer Overflow

CNA Affected

[
  {
    "product": "hoene/libmysofa",
    "vendor": "hoene",
    "versions": [
      {
        "lessThan": "1.2.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1

huntr.dev/bounties/7ca8d9ea-e2a6-4294-af28-70260bb53bc1

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGQ45S4RH7MC42NHTAGOIHYR4C5IRTMZ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WGY7TAZX2M4NYXXGNHIBBKKN5XMSMKQ4/

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

71.5%

JSON

Related for CVELIST:CVE-2021-3756