Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2021-29632

HistoryJan 18, 2022 - 5:15 p.m.

CVE-2021-29632

2022-01-1817:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2021-29632

freebsd

vulnerability

console data scrolling

memory overwrite

kernel memory

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

34.3%

JSON

In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE before p12, certain conditions involving use of the highlight buffer while text is scrolling on the console, console data may overwrite data structures associated with the system console or other kernel memory.

OSVersionArchitecturePackageVersionFilename
Debian10allkfreebsd-10<= 10.3~svn300087-5kfreebsd-10_10.3~svn300087-5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	all	kfreebsd-10	<= 10.3~svn300087-5	kfreebsd-10_10.3~svn300087-5_all.deb

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

34.3%

JSON

Related for DEBIANCVE:CVE-2021-29632