Yüksek CVSS 7.5 PoC var
CVE-2021-27219: Glib: güvenlik açığı
Açıklama (NVD)
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
Özet bilgiler
- Ürün
- Gnome Glib
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %3,06 (yüzdelik 88)
- CWE
- CWE-681
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gnome-glib | — | — | 2.66.6 |
| gnome-glib | 2.67.0 | — | 2.67.3 |
| fedoraproject-fedora | 33 | 33 | — |
| fedoraproject-fedora | 34 | 34 | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-cloud-backup | — | — | — |
| netapp-e-series-performance-analyzer | — | — | — |
| broadcom-brocade-fabric-operating-system-firmware | — | — | — |
| debian-debian-linux | 9.0 | 9.0 | — |
Kaynaklar
- NVD kaydı
- gitlab.gnome.org
- lists.apache.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.gentoo.org
- security.netapp.com
- gitlab.gnome.org
- lists.apache.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.gentoo.org
- security.netapp.com
- cert-portal.siemens.com
- CWE-681