Orta CVSS 5.5 PoC var
CVE-2021-37600: Util-linux: tamsayı taşması
Açıklama (NVD)
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
Özet bilgiler
- Ürün
- Kernel Util-linux
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %0,66 (yüzdelik 52)
- CWE
- CWE-190
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| kernel-util-linux | — | 2.37.1 | — |
| netapp-ontap-select-deploy-administration-utility | — | — | — |