CVE-2021-41581

2021-09-2403:15:00

Alpine Linux Development Team

security.alpinelinux.org

cve-2021-41581

x509_constraints_parse_mailbox

libcrypto

buffer over-read

libressl

domain_part_max_len

unix

EPSS

0.001

Percentile

23.5%

JSON

x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks ‘\0’ termination.

OSVersionArchitecturePackageVersionFilename
Alpine3.14-communitynoarchlibressl= 3.3.3-r0UNKNOWN
Alpine3.13-mainnoarchlibressl= 3.1.5-r0UNKNOWN
Alpine3.12-mainnoarchlibressl= 3.1.2-r0UNKNOWN
Alpine3.11-mainnoarchlibressl= 3.0.2-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.14-community	noarch	libressl	= 3.3.3-r0	UNKNOWN
Alpine	3.13-main	noarch	libressl	= 3.1.5-r0	UNKNOWN
Alpine	3.12-main	noarch	libressl	= 3.1.2-r0	UNKNOWN
Alpine	3.11-main	noarch	libressl	= 3.0.2-r0	UNKNOWN

EPSS

0.001

Percentile

23.5%

JSON

Related for ALPINE:CVE-2021-41581