Lucene search

Ubuntu.comUB:CVE-2021-3548

HistoryMay 26, 2021 - 12:00 a.m.

CVE-2021-3548

2021-05-2600:00:00

ubuntu.com

flaw

dmg2img

memory leaking

code execution

unix

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS

0.001

Percentile

32.4%

JSON

A flaw was found in dmg2img through 20170502. dmg2img did not validate the
size of the read buffer during memcpy() inside the main() function. This
possibly leads to memory layout information leaking in the data. This might
be used in a chain of vulnerability in order to reach code execution.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchdmg2img< anyUNKNOWN
ubuntu20.04noarchdmg2img< anyUNKNOWN
ubuntu22.04noarchdmg2img< anyUNKNOWN
ubuntu24.04noarchdmg2img< anyUNKNOWN
ubuntu16.04noarchdmg2img< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	dmg2img	< any	UNKNOWN
ubuntu	20.04	noarch	dmg2img	< any	UNKNOWN
ubuntu	22.04	noarch	dmg2img	< any	UNKNOWN
ubuntu	24.04	noarch	dmg2img	< any	UNKNOWN
ubuntu	16.04	noarch	dmg2img	< any	UNKNOWN

References

github.com/Lekensteyn/dmg2img/issues/9

launchpad.net/bugs/cve/CVE-2021-3548

nvd.nist.gov/vuln/detail/CVE-2021-3548

security-tracker.debian.org/tracker/CVE-2021-3548

www.cve.org/CVERecord?id=CVE-2021-3548

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS

0.001

Percentile

32.4%

JSON

Related for UB:CVE-2021-3548