PT-2021-21586 · Rcdcap · Rcdcap

Kasif Dekel + 1 · Published 2021-08-12 · Updated 2021-08-20 · CVE-2021-37222

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RCDCAP versions prior to 1.0.5

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via specially crafted packets.

Recommendations For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-37222

Affected Products

Rcdcap

References · 6

• http://hg.code.sf.net/p/rcdcap/code/rev/0af05606c55b#l2.10 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-37222 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37222 · Vendor Advisory
• https://openhub.net/p/rcdcap · Note
• https://t.me/cvenotify/19196 · Telegram Post
• https://t.me/cibsecurity/27211 · Telegram Post