PT-2021-17970 · Unknown · Serenityos+1

Idanho · Published 2021-04-06 · Updated 2022-12-09 · CVE-2021-28874

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SerenityOS versions prior to c9f25bca048443e317f1994ba9b106f2386688c3

Description: The issue is a buffer overflow vulnerability in LibTextCode, which can be triggered by opening a crafted file.

Recommendations: For versions prior to c9f25bca048443e317f1994ba9b106f2386688c3, update to a version that includes the fix, specifically c9f25bca048443e317f1994ba9b106f2386688c3 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-28874

Affected Products

Libtextcode

Serenityos

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-28874 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28874 · Vendor Advisory
• https://github.com/SerenityOS/serenity/pull/5802 · Note
• https://github.com/SerenityOS/serenity/commit/c9f25bca048443e317f1994ba9b106f2386688c3 · Note
• https://github.com/SerenityOS/serenity/issues/5769 · Note
• https://t.me/cvenotify/13028 · Telegram Post