PT-2022-11230 · Gerbv+3 · Gerbv+3

Claudio Bozzato · Published 2022-02-04 · Updated 2024-12-25 · CVE-2021-40401

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions Gerbv versions 2.7.0 through 2.7.1 Gerbv dev (commit b5f1eacd)

Description A use-after-free issue exists in the RS-274X aperture definition tokenization functionality. This can be triggered by a specially-crafted gerber file, potentially leading to code execution. An attacker can exploit this by providing a malicious file.

Recommendations For Gerbv versions 2.7.0 through 2.7.1, consider avoiding the use of the RS-274X aperture definition tokenization functionality until a patch is available. For Gerbv dev (commit b5f1eacd), restrict the processing of gerber files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

ALT-PU-2024-17464

ALT-PU-2024-17535

CVE-2021-40401

DLA-3210-1

DSA-5306-1

MGASA-2022-0260

OPENSUSE-SU-2024:12527-1

USN-6209-1

Affected Products

Alt Linux

Gerbv

Linuxmint

Ubuntu

References · 26

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1415 · Exploit
• https://osv.dev/vulnerability/MGASA-2022-0260 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40401 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/TUM5GIUZJ7AVHVCXDZW6ZVCAPV2ISN47 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6209-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40401 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40401 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40400 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUM5GIUZJ7AVHVCXDZW6ZVCAPV2ISN47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40393 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3210-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-40401 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-40401 · Security Note
• https://osv.dev/vulnerability/DSA-5306-1 · Vendor Advisory