Bug 2041798 (CVE-2021-40391) - CVE-2021-40391 Gerbv: out-of-bounds write in the drill format T-code tool number functionality
Summary: CVE-2021-40391 Gerbv: out-of-bounds write in the drill format T-code tool num...
Keywords:
Status: NEW
Alias: CVE-2021-40391
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2041799
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-01-18 10:15 UTC by Dhananjay Arunesh
Modified: 2023-07-07 08:28 UTC (History)
0 users

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Dhananjay Arunesh 2022-01-18 10:15:23 UTC 
An out-of-bounds write vulnerability exists in the drill format T-code tool
number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked
version of Gerbv (commit 71493260). A specially-crafted drill file can lead to
code execution. An attacker can provide a malicious file to trigger this
vulnerability.

References:
https://github.com/gerbv/gerbv/commit/672214abb47a802fc000125996e6e0a46c623a4e
https://github.com/gerbv/gerbv/issues/30
Comment 1 Dhananjay Arunesh 2022-01-18 10:15:47 UTC 
Created gerbv tracking bugs for this issue:

Affects: fedora-all [bug 2041799]
Note You need to log in before you can comment on or make changes to this bug.