CVE-2021-32559

Опубликовано: 06 июл. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.

Ссылки

https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md
Third Party Advisory
https://github.com/mhammond/pywin32/issues/1700
Patch
Third Party Advisory
https://github.com/mhammond/pywin32/pull/1701
Third Party Advisory
https://github.com/mhammond/pywin32/releases
Release Notes
Third Party Advisory
https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md
Third Party Advisory
https://github.com/mhammond/pywin32/issues/1700
Patch
Third Party Advisory
https://github.com/mhammond/pywin32/pull/1701
Third Party Advisory
https://github.com/mhammond/pywin32/releases
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mhammond:pywin32:*:*:*:*:*:*:*:*

Версия до 301 (исключая)

EPSS

Процентиль: 41%

0.00191

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

GHSA-hwfp-hg2m-9vr2

CVSS3: 6.5

github

больше 4 лет назад

Integer overflow in pywin32

BDU:2024-04290

CVSS3: 6.5

fstec

почти 2 года назад

Уязвимость пакета pywin32 платформы для операционного анализа Splunk Enterprise, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 41%

0.00191

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-190