Lucene search

[email protected]NVD:CVE-2021-20240

HistoryMay 28, 2021 - 11:15 a.m.

CVE-2021-20240

2021-05-2811:15:08

CWE-191

[email protected]

web.nvd.nist.gov

gdk-pixbuf

crafted gif image

out of bounds write

data confidentiality

integrity

system availability

CVSS2

8.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

65.6%

JSON

A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected configurations

Nvd

Node

gnomegdk-pixbufRange<2.42.0

Node

fedoraprojectfedoraMatch33

fedoraprojectfedoraMatch34

VendorProductVersionCPE
gnomegdk-pixbuf*cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*
fedoraprojectfedora33cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
fedoraprojectfedora34cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnome	gdk-pixbuf	*	cpe:2.3:a:gnome:gdk-pixbuf::::::::
fedoraproject	fedora	33	cpe:2.3:o:fedoraproject:fedora:33:::::::*
fedoraproject	fedora	34	cpe:2.3:o:fedoraproject:fedora:34:::::::*