PT-2021-7821 · Xmill · Xmill

Carl Hurd · Published 2021-08-10 · Updated 2024-08-03 · CVE-2021-21815

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xmill version 0.7

Description The issue is related to a stack-based buffer overflow in the HandleFileArg functionality of Xmill, which occurs due to insufficient length checks when copying user-provided input into a statically sized buffer using the strcpy function. This can be triggered by an attacker providing malicious input, potentially allowing them to execute arbitrary code. The filepattern argument, which is under user control, is passed directly to strcpy, leading to a stack-buffer overflow.

Recommendations For Xmill version 0.7, as a temporary workaround, consider restricting the use of the HandleFileArg functionality until a patch is available. Avoid using the filepattern argument in a way that could trigger the buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2023-03275

CVE-2021-21815

Affected Products

Xmill

References · 10

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-21815 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21815 · Vendor Advisory
• https://safe-surf.ru/upload/VULN/VULN-20210813.1.pdf · Security Note
• https://bdu.fstec.ru/vul/2023-03275 · Security Note
• https://se.com/ww/en/download/document/SEVD-2021-222-02 · Note
• https://t.me/cibsecurity/40759 · Telegram Post
• https://vuldb.com/?id.180879 · Note
• https://t.me/cvenotify/88695 · Telegram Post
• https://t.me/cvenotify/28899 · Telegram Post