In asf extractor, there is a possible out of bounds read... · CVE-2021-0620 · GitHub Advisory Database · GitHub

In asf extractor, there is a possible out of bounds read...

Moderate severity Unreviewed Published Nov 19, 2021 to the GitHub Advisory Database • Updated Mar 7, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561381.

References

Published by the National Vulnerability Database

Nov 18, 2021

Published to the GitHub Advisory Database Nov 19, 2021

Last updated Mar 7, 2024

Severity

Moderate

5.5

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N