CVE-2021-33574
PoC —CVSS 3.1
9.8 critical
EPSS
3%p86
Published
()
Modified
Description
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
- Vendors
- gnufedoraprojectnetappdebian
- Products
- glibc, fedora, cloud backup, e-series santricity os controller, solidfire baseboard management controller firmware, h300s firmware, h500s firmware, h700s firmware, h300e firmware, h500e firmware, h700e firmware, h410s firmware
- Weakness
- CWE-416
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.