Published: 12/08/2021 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

In librt in the GNU C Library (aka glibc) up to and including 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc
fedoraproject fedora 35
oracle communications cloud native core network function cloud native environment 22.1.0
oracle communications cloud native core binding support function 22.1.3
oracle communications cloud native core network repository function 22.2.0
oracle communications cloud native core security edge protection proxy 22.1.1
oracle communications cloud native core network repository function 22.1.2
oracle enterprise operations monitor 4.3
oracle enterprise operations monitor 4.4
oracle enterprise operations monitor 5.0
oracle communications cloud native core unified data repository 22.2.0

In librt in the GNU C Library (aka glibc) through 234, sysdeps/unix/sysv/linux/mq_notifyc mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix (CVE-2021-38604) ...

In librt in the GNU C Library (aka glibc) through 234, sysdeps/unix/sysv/linux/mq_notifyc mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-476 https://sourceware.org/bugzilla/show_bug.cgi?id=28213 https://blog.tuxcare.com/cve/tuxcare-team-identifies-cve-2021-38604-a-new-vulnerability-in-glibc https://security.netapp.com/advisory/ntap-20210909-0005/https://www.oracle.com/security-alerts/cpujul2022.html https://security.gentoo.org/glsa/202208-24 https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=b805aebd42364fe696e417808a700fdb9800c9e8 https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=4cc79c217744743077bf7a0ec5e0a4318f1e6641 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GYEXYM37RCJWJ6B5KQUYQI4NZBDDYSXP/https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2023-2371.html https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10

CVE-2021-38604

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect