CVE-2021-27645 vulnerabilities and exploits

(subscribe to this query)

2.5

CVSSv3

The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 up to and including 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is...

Gnu Glibc Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 10.0

7.5

CVSSv3

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

Gnu Glibc Netapp Ontap Select Deploy Administration Utility -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -

7.5

CVSSv3

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and previous versions, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Gnu Glibc Netapp Ontap Select Deploy Administration Utility -Netapp E-series Santricity Os Controller Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0 Fujitsu M10-1 Firmware Fujitsu M10-4 Firmware Fujitsu M10-4s Firmware Fujitsu M12-1 Firmware Fujitsu M12-2 Firmware Fujitsu M12-2s Firmware Debian Debian Linux 10.0

9.1

CVSSv3

The wordexp function in the GNU C Library (aka glibc) up to and including 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This oc...

Gnu Glibc Netapp Ontap Select Deploy Administration Utility -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os Controller Debian Debian Linux 10.0

2 Github repositories

5.5

CVSSv3

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and previous versions, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in appl...

Gnu Glibc Netapp Ontap Select Deploy Administration Utility -Netapp A250 Firmware -Netapp 500f Firmware -Netapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Debian Debian Linux 10.0

4.8

CVSSv3

The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Gnu Glibc Fedoraproject Fedora 32 Netapp E-series Santricity Os Controller

7.8

CVSSv3

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to pote...

Gnu Glibc Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Ontap Select Deploy Administration Utility -Netapp E-series Performance Analyzer -Netapp Nfs Plug-in Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -

1 Github repository

5.9

CVSSv3

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and previous versions, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, lead...

Gnu Glibc

8.1

CVSSv3

An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the 'num' parameter results in a signed comparison ...

Gnu Glibc Fedoraproject Fedora 31 Fedoraproject Fedora 32 Debian Debian Linux 10.0

3 Github repositories

9.8

CVSSv3

The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) up to and including 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of ser...

Gnu Glibc Oracle Enterprise Operations Monitor 4.3 Oracle Enterprise Operations Monitor 4.4 Oracle Enterprise Operations Monitor 5.0 Oracle Communications Cloud Native Core Unified Data Repository 22.2.0 Debian Debian Linux 10.0

1 Github repository

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook