Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 3 min 171 bronnen 2 kritiek 35 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2021-33574

CRITICAL · 9.8 CVSS Gepubliceerd: CWE-416

Beschrijving

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

Vendors

Gnu Fedoraproject Netapp Debian

Affected products

Glibc Fedora Cloud Backup E-series Santricity Os Controller Solidfire Baseboard Management Controller Firmware H300s Firmware H300s H500s Firmware H500s H700s Firmware H700s H300e Firmware H300e H500e Firmware H500e H700e Firmware H700e H410s Firmware H410s Debian Linux

References