CVE-2021-43413

Katalog CVE

CVSS 8.8 · High EPSS 2,0%

Kerentanan pada gnu hurd. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file, allowing anyone to modify any files that they can read. This can be trivially exploited to get full root access.

Rincian

Terbit di NVD

7 November 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 79,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.gnu.org/archive/html/bug-hurd/2002-11/msg00263.html mailing list · advisory vendor
• https://lists.gnu.org/archive/html/bug-hurd/2005-06/msg00191.html mailing list · advisory vendor
• https://lists.gnu.org/archive/html/bug-hurd/2021-05/msg00079.html exploit · mailing list · advisory vendor
• https://www.mail-archive.com/bug-hurd%40gnu.org/msg32113.html