CVE-2021-21813

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line

High · published August 13, 2021

CVSS v3.0
7.8
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflow.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Published
2021-08-13T22:40Z
EPSS history
Timeline
  • 13 AUG 22:40Z
    Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line
    cvelistv5