PT-2021-5667 · Gerbv+3 · Gerbv+3

Claudio Bozzato · Published 2021-11-03 · Updated 2024-12-25 · CVE-2021-40394

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gerbv versions 2.7.0 and dev (commit b5f1eacd) Gerbv forked version (commit 71493260)

Description An out-of-bounds write issue exists in the RS-274X aperture macro variables handling functionality. This can be triggered by a specially-crafted gerber file, potentially leading to code execution. An attacker can exploit this by providing a malicious file.

Recommendations For Gerbv version 2.7.0, consider avoiding the use of specially-crafted gerber files until a patch is available. For Gerbv dev (commit b5f1eacd), restrict the handling of RS-274X aperture macro variables to minimize the risk of exploitation. For the Gerbv forked version (commit 71493260), disable the functionality related to gerber file processing until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Memory Corruption

Weakness Enumeration

CWE-190

CWE-787

Related Identifiers

ALT-PU-2024-17464

ALT-PU-2024-17535

BDU:2022-00106

CVE-2021-40394

DLA-3593-1

DSA-5306-1

MGASA-2022-0260

USN-6209-1

Affected Products

Alt Linux

Gerbv

Linuxmint

Ubuntu

References · 32

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1404 · Exploit
• https://osv.dev/vulnerability/MGASA-2022-0260 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/TUM5GIUZJ7AVHVCXDZW6ZVCAPV2ISN47 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00106 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-40394 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-40394 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6209-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40401 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40400 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3593-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-40394 · Security Note
• https://ubuntu.com/security/CVE-2021-40394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40393 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40394 · Security Note