ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-38604

PoC —
CVSS 3.1
7.5 high
EPSS
3%p87
Published
()
Modified
Description

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.

Vendors
gnufedoraprojectoracle
Products
glibc, fedora, communications cloud native core binding support function, communications cloud native core network function cloud native environment, communications cloud native core network repository function, communications cloud native core security edge protection proxy, communications cloud native core unified data repository, enterprise operations monitor
Weakness
CWE-476
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news

No ingested article mentions this CVE yet.