by Kastro
Paper/Archive/CVE-2021-3756

CVE-2021-3756

hoene hoene/libmysofa — Heap-based Buffer Overflow in hoene/libmysofa

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.8.648 × 2013.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

libmysofa is vulnerable to Heap-based Buffer Overflow

Affected

ProductAffectedFixed inSource
hoene/libmysofaunspecified – < 1.2.11.2.1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
@huntrdev (CNA)6.2CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

References

refhuntr.dev/bounties/7ca8d9ea-e2a6-4294-af28-70260bb53bc1refgithub.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WGY7TAZX2M4NYXXGNHIBBKKN5XMSMKQ4advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGQ45S4RH7MC42NHTAGOIHYR4C5IRTMZ