CVE-2021-33655 MEDIUM

Published: 2022-07-18 | Last Modified: 2024-11-21 | Status: Modified

When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.

Additional Descriptions (1)

Cuando son enviados datos maliciosos al kernel mediante ioctl cmd FBIOPUT_VSCREENINFO, el kernel escribirá memoria fuera de límites

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Source: [email protected]

Type: Primary

Exploitability Score: 0.8

Impact Score: 5.9

Source	Type	Description
[email protected]	Secondary	en CWE-787
[email protected]	Primary	en CWE-787

Vendor	Product	Version	Update	Type
linux	linux_kernel	*	<built-in method update of dict object at 0x7fd2dbe97a80>	Operating System
linux	linux_kernel	5.19	<built-in method update of dict object at 0x7fd3842bb480>	Operating System
linux	linux_kernel	5.19	<built-in method update of dict object at 0x7fd384238080>	Operating System
linux	linux_kernel	5.19	<built-in method update of dict object at 0x7fd386741a00>	Operating System
linux	linux_kernel	5.19	<built-in method update of dict object at 0x7fd2dbe97cc0>	Operating System
linux	linux_kernel	5.19	<built-in method update of dict object at 0x7fd2dbe96740>	Operating System
debian	debian_linux	10.0	<built-in method update of dict object at 0x7fd370378f40>	Operating System
debian	debian_linux	11.0	<built-in method update of dict object at 0x7fd2d8110dc0>	Operating System

Vulnerable	CPE
Yes	`cpe:2.3:o:debian:debian_linux:10.0:::::::*`
Yes	`cpe:2.3:o:debian:debian_linux:11.0:::::::*`