CVE-2021-31872

Katalog CVE

CVSS 9.8 · Critical EPSS 2,1%

Kerentanan Integer Overflow or Wraparound pada klibc project klibc, debian linux. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit systems may result in a buffer overflow or other security impact.

Rincian

Terbit di NVD

30 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 80,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=9b1c91577aef7f2e72c3aa11a27749160bd278ff patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/04/30/1 mailing list · release notes · advisory pihak ketiga
• https://kernel.org/pub/linux/libs/klibc/2.0/ release notes · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html advisory pihak ketiga
• https://lists.zytor.com/archives/klibc/2021-April/004593.html mailing list · release notes · advisory pihak ketiga