Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2021-42522
HistoryAug 25, 2022 - 6:15 p.m.

CVE-2021-42522

2022-08-2518:15:09
Debian Security Bug Tracker
security-tracker.debian.org
10
anjuta
document manager
vulnerability
libxml2 api
information disclosure

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

51.4%

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call ‘g_free()’ to release the return value of ‘xmlGetProp()’.

OSVersionArchitecturePackageVersionFilename
Debian12allanjuta<= 2:3.34.0-8anjuta_2:3.34.0-8_all.deb
Debian11allanjuta<= 2:3.34.0-3anjuta_2:3.34.0-3_all.deb

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

51.4%

Related for DEBIANCVE:CVE-2021-42522