CVE-2021-46848Critical· 9.1▾ MidnightGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.1 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.2%
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
libtasn1 < 4.19.0fedora = 35fedora = 36fedora = 37debian_linux = 10.0Upgrade past the affected range:
libtasn1 4.19.0Connected by shared product, vendor, weakness, or advisory.
CVE-2021-3999High· 7.8A flaw was found in glibc
CVE-2022-1271High· 8.8An arbitrary file write vulnerability was found in GNU gzip's zgrep utility
CVE-2022-2509High· 7.5A vulnerability found in gnutls
CVE-2021-43396High· 7.5In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset
CVE-2021-38604High· 7.5In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference
CVE-2021-35942Critical· 9.1The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or dis…