Lucene search
PRIOn knowledge basePRION:CVE-2021-38604HistoryAug 12, 2021 - 4:15 p.m.
Null pointer dereference
2021-08-1216:15:00
PRIOn knowledge base
www.prio-n.com
6
In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.
References
blog.tuxcare.com/cve/tuxcare-team-identifies-cve-2021-38604-a-new-vulnerability-in-glibc
lists.fedoraproject.org/archives/list/[email protected]/message/GYEXYM37RCJWJ6B5KQUYQI4NZBDDYSXP/
security.gentoo.org/glsa/202208-24
security.netapp.com/advisory/ntap-20210909-0005/
sourceware.org/bugzilla/show_bug.cgi?id=28213
sourceware.org/git/?p=glibc.git;a=commit;h=4cc79c217744743077bf7a0ec5e0a4318f1e6641
sourceware.org/git/?p=glibc.git;a=commit;h=b805aebd42364fe696e417808a700fdb9800c9e8
www.oracle.com/security-alerts/cpujul2022.html
Related
nessus
nessus
Amazon Linux 2 : glibc (ALAS-2023-2371)
2023-12-04 00:00:00
Photon OS 1.0: Glibc PHSA-2021-1.0-0428
2021-08-27 00:00:00
Photon OS 3.0: Glibc PHSA-2021-3.0-0295
2021-09-07 00:00:00
mageia
mageia
Updated glibc packages fix security issue
2021-08-14 17:00:09
Updated glibc packages fix security vulnerability
2021-07-01 02:58:41
openvas
openvas
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2709)
2021-11-12 00:00:00
Mageia: Security Advisory (MGASA-2021-0404)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2684)
2021-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2021-33574
2021-05-25 00:00:00
CVE-2021-38604
2021-08-12 00:00:00
osv
osv
CVE-2021-38604
2021-08-12 16:15:10
CVE-2021-33574
2021-05-25 22:15:10
Moderate: glibc security, bug fix, and enhancement update
2021-11-09 09:08:59
redhatcve
redhatcve
CVE-2021-38604
2021-08-13 17:50:02
CVE-2021-33574
2021-05-27 23:10:50
cve
cve
CVE-2021-38604
2021-08-12 16:15:10
CVE-2021-33574
2021-05-25 22:15:10
nvd
nvd
CVE-2021-38604
2021-08-12 16:15:10
CVE-2021-33574
2021-05-25 22:15:10
amazon
amazon
Medium: glibc
2023-11-29 22:20:00
Low: glibc
2022-01-18 21:37:00
cvelist
cvelist
CVE-2021-38604
2021-08-12 15:43:34
CVE-2021-33574
2021-05-25 00:00:00
debiancve
debiancve
CVE-2021-38604
2021-08-12 16:15:10
CVE-2021-33574
2021-05-25 22:15:10
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-33574, CVE-2021-35942, CVE-2021-38604
2021-08-19 17:44:27
cbl_mariner
cbl_mariner
CVE-2021-38604 affecting package glibc 2.28-24
2021-10-05 03:00:55
CVE-2021-38604 affecting package glibc for versions less than 2.35-1
2022-04-26 20:17:01
CVE-2021-33574 affecting package glibc 2.28-22
2021-10-05 03:00:55
fedora
fedora
[SECURITY] Fedora 35 Update: glibc-2.34-6.fc35
2021-09-29 00:20:37
[SECURITY] Fedora 34 Update: glibc-2.33-16.fc34
2021-06-14 01:06:20
[SECURITY] Fedora 33 Update: glibc-2.32-8.fc33
2021-07-07 01:04:22
photon
photon
prion
prion
Design/Logic Flaw
2021-05-25 22:15:00
veracode
veracode
Denial Of Service (DoS)
2021-11-17 22:36:20
ibm
ibm
f5
f5
K43700555 : GNU C Library (glibc) vulnerability CVE-2021-33574
2021-09-24 00:00:00
suse
suse
Security update for glibc (moderate)
2021-10-06 00:00:00
Security update for glibc (moderate)
2021-10-18 00:00:00
almalinux
almalinux
Moderate: glibc security, bug fix, and enhancement update
2021-11-09 09:08:59
oraclelinux
oraclelinux
glibc security, bug fix, and enhancement update
2021-11-16 00:00:00
glibc security update
2021-11-23 00:00:00
rocky
rocky
glibc security, bug fix, and enhancement update
2021-11-09 09:08:59
redhat
redhat
(RHSA-2021:4358) Moderate: glibc security, bug fix, and enhancement update
2021-11-09 09:08:59
(RHSA-2022:0434) Moderate: Release of OpenShift Serverless 1.20.0
2022-02-03 17:07:25
gentoo
gentoo
glibc: Multiple vulnerabilities
2021-07-06 00:00:00
GNU C Library: Multiple Vulnerabilities
2022-08-14 00:00:00
debian
debian
[SECURITY] [DLA 3152-1] glibc security update
2022-10-17 15:54:41
ics
ics
Siemens SIMATIC S7-1500 TM MFP BIOS
2023-06-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
avleonov
avleonov