CVE-2021-42341

Katalog CVE

CVSS 7.5 · High EPSS 2,1%

Kerentanan pada openrc project openrc. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the '\0' byte at the end of the string. This results in memory corruption. CVE-2021-42341 was introduced in git commit 63db2d99e730547339d1bdd28e8437999c380cae, which was introduced as part of OpenRC 0.44.0 development.

Rincian

Terbit di NVD

14 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 81,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.gentoo.org/816900 exploit · patch · advisory pihak ketiga
• https://github.com/OpenRC/openrc/commit/63db2d99e730547339d1bdd28e8437999c380cae patch · advisory pihak ketiga
• https://github.com/OpenRC/openrc/commit/bb8334104baf4d5a4a442a8647fb9204738f2204 patch · advisory pihak ketiga
• https://github.com/OpenRC/openrc/issues/418 exploit · patch · advisory pihak ketiga
• https://github.com/OpenRC/openrc/issues/459 exploit · patch · advisory pihak ketiga
• https://github.com/OpenRC/openrc/pull/462 patch · advisory pihak ketiga