CVE-2021-45918

Katalog CVE

CVSS 7.5 · High EPSS 1,5%

Kerentanan Heap-based Buffer Overflow pada nhi health insurance web service component. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.

Rincian

Terbit di NVD

20 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-1284: Improper Validation of Specified Quantity in Input

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.twcert.org.tw/tw/cp-132-6227-eaf49-1.html advisory pihak ketiga