PT-2021-4258 · Dmg2Img+1 · Dmg2Img+1

Anshunkang Zhou + 1 · Published 2021-05-11 · Updated 2021-06-03 · CVE-2021-32614

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions dmg2img versions through 20170502

Description A flaw was found in the fill mishblk() function, which does not check the length of the read buffer and copies 0xCC bytes from it. The length of the buffer is controlled by an attacker, allowing for a potential memory layout information leak by providing a length smaller than 0xCC, causing memcpy to reach out of the malloc'ed bound. This could be used in a chain of vulnerabilities to reach code execution. The exploitation of this flaw may allow a remote attacker to access confidential data and cause a denial of service.

Recommendations For versions through 20170502, consider disabling the fill mishblk() function until a patch is available to prevent potential memory layout information leaks and code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2021-04866

CVE-2021-32614

Affected Products

Debian

Dmg2Img

References · 9

• https://security-tracker.debian.org/tracker/CVE-2021-32614 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32614 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-32614 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32614 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32614 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-32614 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-32614 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04866 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1959911 · Note