Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-3700

Опубликовано: 08 авг. 2021
Источник: redhat
CVSS3: 3.9
EPSS Низкий

Описание

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.

A use-after-free vulnerability was found in usbredir in the usbredirparser_serialize() function in usbredirparser/usbredirparser.c . This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6usbredirOut of support scope
Red Hat Enterprise Linux 7usbredirOut of support scope
Red Hat Enterprise Linux 8usbredirFix deferred
Red Hat Enterprise Linux 9usbredirNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1992830usbredir: use-after-free in usbredirparser_serialize() in usbredirparser/usbredirparser.c

EPSS

Процентиль: 24%
0.00314
Низкий

3.9 Low

CVSS3

Связанные уязвимости

CVSS3: 6.4
ubuntu
больше 4 лет назад

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.

CVSS3: 6.4
nvd
больше 4 лет назад

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.

CVSS3: 6.4
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 6.4
debian
больше 4 лет назад

A use-after-free vulnerability was found in usbredir in versions prior ...

CVSS3: 6.4
github
больше 4 лет назад

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.

EPSS

Процентиль: 24%
0.00314
Низкий

3.9 Low

CVSS3