Lucene search

K
nvd[email protected]NVD:CVE-2021-33641
HistoryJan 20, 2023 - 9:15 p.m.

CVE-2021-33641

2023-01-2021:15:10
CWE-416
web.nvd.nist.gov
vulnerability
memory corruption
file processing
use after free
cve-2021-33641

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

22.9%

When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free).

Affected configurations

NVD
Node
openeulerbyaccRange<1.9.20200330
OR
openeulerbyaccRange2.02.0.20210808

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

22.9%

Related for NVD:CVE-2021-33641