Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-3561

Опубликовано: 26 апр. 2021
Источник: redhat
CVSS3: 5.3

Описание

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

An Out of Bounds flaw was found in fig2dev utility within transfig. An attacker could use this flaw and provide a crafted input to read_objects() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6transfigNot affected
Red Hat Enterprise Linux 6xfigNot affected
Red Hat Enterprise Linux 7transfigNot affected
Red Hat Enterprise Linux 8transfigNot affected
Red Hat Enterprise Linux 9transfigNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-119
https://bugzilla.redhat.com/show_bug.cgi?id=1955675fig2dev: Global buffer overflow in fig2dev/read.c in function read_objects

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 4 лет назад

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 7.1
nvd
больше 4 лет назад

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 7.1
debian
больше 4 лет назад

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bound ...

CVSS3: 7.1
github
больше 3 лет назад

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 7.1
fstec
почти 5 лет назад

Уязвимость функции read_objects() утилиты для преобразования файлов с расширением .fig Fig2dev, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю нарушить целостность данных, а также вызвать отказ в обслуживании

5.3 Medium

CVSS3