CVE-2021-38604

Exploit

EPSS 0.1%
Published 12.08.2021 16:15:10
Last modified 30.05.2025 19:15:26
Source cve@mitre.org
Teams watchlist Login
Open Login

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.

Affected products Warnungen 0 Metrics 4 CWE 1 References 11

Data is provided by the National Vulnerability Database (NVD)

Gnu ≫ Glibc Version <= 2.34

Fedoraproject ≫ Fedora Version35

Oracle ≫ Communications Cloud Native Core Binding Support Function Version22.1.3

Oracle ≫ Communications Cloud Native Core Network Function Cloud Native Environment Version22.1.0

Oracle ≫ Communications Cloud Native Core Network Repository Function Version22.1.2

Oracle ≫ Communications Cloud Native Core Network Repository Function Version22.2.0

Oracle ≫ Communications Cloud Native Core Security Edge Protection Proxy Version22.1.1

Oracle ≫ Communications Cloud Native Core Unified Data Repository Version22.2.0

Oracle ≫ Enterprise Operations Monitor Version4.3

Oracle ≫ Enterprise Operations Monitor Version4.4

Oracle ≫ Enterprise Operations Monitor Version5.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.1%	0.287

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H