CVE-2021-3696

Katalog CVE

CVSS 4.5 · Medium EPSS 0,47%

Kerentanan Out-of-bounds Write pada gnu grub2, redhat developer tools +11 lainnya. Skor CVSS 3.1 4.5 (Medium) menurut NVD.

Deskripsi (NVD)

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.

Rincian

Terbit di NVD

6 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 39,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1991686 issue tracking · advisory pihak ketiga
• https://security.gentoo.org/glsa/202209-12 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20220930-0001/ advisory pihak ketiga