CVE-2021-27219

Опубликовано: 15 фев. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

Ссылки

https://gitlab.gnome.org/GNOME/glib/-/issues/2319
Exploit
Issue Tracking
Third Party Advisory
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHRLJOEGBRQKJIPZQPAELZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVURYQFYKFOWY5HAF4FTEPN/
https://security.gentoo.org/glsa/202107-13
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210319-0004/
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/2319
Exploit
Issue Tracking
Third Party Advisory
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHRLJOEGBRQKJIPZQPAELZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVURYQFYKFOWY5HAF4FTEPN/
https://security.gentoo.org/glsa/202107-13
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210319-0004/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Версия до 2.66.6 (исключая)

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Версия от 2.67.0 (включая) до 2.67.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*

cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00226

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-681

Связанные уязвимости

CVE-2021-27219

CVSS3: 7.5

ubuntu

больше 4 лет назад

CVE-2021-27219

CVSS3: 9.8

redhat

больше 4 лет назад

CVE-2021-27219

CVSS3: 7.5

msrc

больше 4 лет назад

Описание отсутствует

CVE-2021-27219

CVSS3: 7.5

debian

больше 4 лет назад

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before ...

RLSA-2021:2170

rocky

почти 4 года назад

Important: glib2 security and bug fix update

EPSS

Процентиль: 45%

0.00226

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-681