ZeroHour

CVE-2021-37600

PoC
CVSS 3.1
5.5 medium
EPSS
<1%p50
Published
()
Modified
Description

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.

Vendors
kernelnetapp
Products
util-linux, ontap select deploy administration utility
Weakness
CWE-190
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.