9

CVE-2021-45960

Exploit
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libexpat Project ≫ Libexpat Version < 2.4.3
Tenable ≫ Nessus Version < 8.15.3
Tenable ≫ Nessus Version >= 10.0.0 < 10.1.1
Debian ≫ Debian Linux Version10.0
Debian ≫ Debian Linux Version11.0
Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.2% 0.897
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-682 Incorrect Calculation

The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/01/17/3
Third Party Advisory
Exploit
Mailing List
https://bugzilla.mozilla.org/show_bug.cgi?id=1217609
Third Party Advisory
Issue Tracking
Permissions Required
https://github.com/libexpat/libexpat/issues/531
Patch
Third Party Advisory
Exploit
Issue Tracking
https://github.com/libexpat/libexpat/pull/534
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202209-24
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220121-0004/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5073
Third Party Advisory
Issue Tracking
https://www.tenable.com/security/tns-2022-05
Third Party Advisory