deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-28709
Published: 2021-11-24
Description: issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-demand (PoD) mode, to provide a way for them to later easily have more memory assigned. Guests are permitted to control certain P2M aspects of individual pages via hypercalls. These hypercalls may act on ranges of pages specified via page orders (resulting in a power-of-2 number of pages). In some cases the hypervisor carries out the requests by splitting them into smaller chunks. Error handling in certain PoD cases has been insufficient in that in particular partial success of some operations was not properly accounted for. There are two code paths affected - page removal (CVE-2021-28705) and insertion of new pages (CVE-2021-28709). (We provide one patch which combines the fix to both issues.)
CVSS Score: 7.8 (HIGH)
CWE: CWE-755
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7ZGWVVRI4XY2XSTBI3XEMWBXPDVX6OT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PXUI4VMD52CH3T7YXAG3J2JW7ZNN3SXF/; https://security.gentoo.org/glsa/202402-07
CVE: CVE-2021-40369
Published: 2021-11-24
Description: A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce plugin, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.0 or later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2022/08/03/3; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2021-40369; https://lists.apache.org/thread/r2j00nrnpjgcmoxvlv3pgfoq9kzrcsfh
CVE: CVE-2021-44140
Published: 2021-11-24
Description: Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-276
References: https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2021-44140; https://lists.apache.org/thread/5qglpjdhvobppx7j550lf1sk28f6011t; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2021-44140
CVE: CVE-2021-20835
Published: 2021-11-24
Description: Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) versions prior to 4.49.1 allows a remote attacker to lead a user to access an arbitrary website and the website launches an arbitrary Activity of the app via the vulnerable App, which may result in Mercari account's access token being obtained.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://jvn.jp/en/jp/JVN49465877/index.html; https://jvn.jp/en/jp/JVN49465877/index.html
CVE: CVE-2021-20840
Published: 2021-11-24
Description: Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN68066589/index.html; https://saasproject.net/ja/fixed/20211019.php; https://wordpress.org/plugins/booking-package/
CVE: CVE-2021-20841
Published: 2021-11-24
Description: Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
References: https://jvn.jp/en/jp/JVN75444925/index.html; https://www.ec-cube.net/info/weakness/20211111/; https://jvn.jp/en/jp/JVN75444925/index.html
CVE: CVE-2021-20842
Published: 2021-11-24
Description: Cross-site request forgery (CSRF) vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack the authentication of Administrator and delete Administrator via a specially crafted web page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN75444925/index.html; https://www.ec-cube.net/info/weakness/20211111/; https://jvn.jp/en/jp/JVN75444925/index.html
CVE: CVE-2021-20843
Published: 2021-11-24
Description: Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to alter the settings of the product via a specially crafted web page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-829
References: http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91161784.html; https://business.ntt-east.co.jp/topics/2021/11_09.html; https://jvn.jp/en/vu/JVNVU91161784/index.html
CVE: CVE-2021-20844
Published: 2021-11-24
Description: Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to obtain sensitive information via a specially crafted web page.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-116
References: http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91161784.html; https://business.ntt-east.co.jp/topics/2021/11_09.html; https://jvn.jp/en/vu/JVNVU91161784/index.html
CVE: CVE-2021-20845
Published: 2021-11-24
Description: Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote attacker to hijack the authentication of an administrator and conduct arbitrary operation via a specially crafted web page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN58407606/index.html; https://www.xml-sitemaps.com/news-20210831.html; https://www.xml-sitemaps.com/standalone-google-sitemap-generator.html
CVE: CVE-2021-20846
Published: 2021-11-24
Description: Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially crafted web page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://delitestudio.com/en/; https://jvn.jp/en/jp/JVN85492429/index.html; https://wordpress.org/plugins/push-notifications-for-wp/
CVE: CVE-2021-20848
Published: 2021-11-24
Description: Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/schollz/rwtxt; https://jvn.jp/en/jp/JVN22515597/index.html; https://github.com/schollz/rwtxt
CVE: CVE-2021-20850
Published: 2021-11-24
Description: PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN17645965/index.html; https://www.powercms.jp/news/release-patch-xmlrpc-api-202110.html; https://jvn.jp/en/jp/JVN17645965/index.html
CVE: CVE-2021-31822
Published: 2021-11-24
Description: When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://advisories.octopus.com/adv/2021-11---Local-privilege-escalation-in-Octopus-Tentacle-%28CVE-2021-31822%29[PII_REDACTED].html; https://advisories.octopus.com/adv/2021-11---Local-privilege-escalation-in-Octopus-Tentacle-%28CVE-2021-31822%29[PII_REDACTED].html
CVE: CVE-2021-32037
Published: 2021-11-24
Description: An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shards of an auth enabled environment. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617, CWE-617
References: https://jira.mongodb.org/browse/SERVER-59071; https://jira.mongodb.org/browse/SERVER-59071
CVE: CVE-2021-3552
Published: 2021-11-24
Description: A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender GravityZone 6.24.1-1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.bitdefender.com/support/security-advisories/insufficient-validation-regular-expression-eppupdateservice-config-file-va-9825; https://www.bitdefender.com/support/security-advisories/insufficient-validation-regular-expression-eppupdateservice-config-file-va-9825
CVE: CVE-2021-3553
Published: 2021-11-24
Description: A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint for Linux versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.bitdefender.com/support/security-advisories/server-side-request-forgery-eppupdateservice-remote-config-file-va-9825/; https://www.bitdefender.com/support/security-advisories/server-side-request-forgery-in-eppupdateservice-remote-config-file-va-9825/; https://www.bitdefender.com/support/security-advisories/server-side-request-forgery-eppupdateservice-remote-config-file-va-9825/
CVE: CVE-2021-3554
Published: 2021-11-24
Description: Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-284
References: https://www.bitdefender.com/support/security-advisories/improper-access-control-vulnerability-patchesupdate-api-va-9825; https://www.bitdefender.com/support/security-advisories/improper-access-control-vulnerability-patchesupdate-api-va-9825
CVE: CVE-2021-41192
Published: 2021-11-24
Description: Redash is a package for data visualization and sharing. If an admin sets up Redash versions 10.0.0 and prior without explicitly specifying the `REDASH_COOKIE_SECRET` or `REDASH_SECRET_KEY` environment variables, a default value is used for both that is the same across all installations. In such cases, the instance is vulnerable to attackers being able to forge sessions using the known default value. This issue only affects installations where the `REDASH_COOKIE_SECRET or REDASH_SECRET_KEY` environment variables have not been explicitly set. This issue does not affect users of the official Redash cloud images, Redash's Digital Ocean marketplace droplets, or the scripts in the `getredash/setup` repository. These instances automatically generate unique secret keys during installation. One can verify whether one's instance is affected by checking the value of the `REDASH_COOKIE_SECRET` environment variable. If it is `c292a0a3aa32397cdb050e233733900f`, should follow the steps to secure the instance, outlined in the GitHub Security Advisory.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1188, CWE-1188
References: https://github.com/getredash/redash/commit/ce60d20c4e3d1537581f2f70f1308fe77ab6a214; https://github.com/getredash/redash/security/advisories/GHSA-g8xr-f424-h2rv; https://ian.sh/redash
CVE: CVE-2021-43777
Published: 2021-11-24
Description: Redash is a package for data visualization and sharing. In Redash version 10.0 and prior, the implementation of Google Login (via OAuth) incorrectly uses the `state` parameter to pass the next URL to redirect the user to after login. The `state` parameter should be used for a Cross-Site Request Forgery (CSRF) token, not a static and easily predicted value. This vulnerability does not affect users who do not use Google Login for their instance of Redash. A patch in the `master` and `release/10.x.x` branches addresses this by replacing `Flask-Oauthlib` with `Authlib` which automatically provides and validates a CSRF token for the state variable. The new implementation stores the next URL on the user session object. As a workaround, one may disable Google Login to mitigate the vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352, CWE-601
References: https://github.com/getredash/redash/commit/da696ff7f84787cbf85967460fac52886cbe063e; https://github.com/getredash/redash/security/advisories/GHSA-vhc7-w7r8-8m34; https://github.com/getredash/redash/commit/da696ff7f84787cbf85967460fac52886cbe063e
CVE: CVE-2021-43780
Published: 2021-11-24
Description: Redash is a package for data visualization and sharing. In versions 10.0 and priorm the implementation of URL-loading data sources like JSON, CSV, or Excel is vulnerable to advanced methods of Server Side Request Forgery (SSRF). These vulnerabilities are only exploitable on installations where a URL-loading data source is enabled. As of time of publication, the `master` and `release/10.x.x` branches address this by applying the Advocate library for making http requests instead of the requests library directly. Users should upgrade to version 10.0.1 to receive this patch. There are a few workarounds for mitigating the vulnerability without upgrading. One can disable the vulnerable data sources entirely, by adding the following env variable to one's configuration, making them unavailable inside the webapp. One can switch any data source of certain types (viewable in the GitHub Security Advisory) to be `View Only` for all groups on the Settings > Groups > Data Sources screen. For users unable to update an admin may modify Redash's configuration through environment variables to mitigate this issue. Depending on the version of Redash, an admin may also need to run a CLI command to re-encrypt some fields in the database. The `master` and `release/10.x.x` branches as of time of publication have removed the default value for `REDASH_COOKIE_SECRET`. All future releases will also require this to be set explicitly. For existing installations, one will need to ensure that explicit values are set for the `REDASH_COOKIE_SECRET` and `REDASH_SECRET_KEY `variables.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://github.com/getredash/redash/commit/61bbb5aa7a23a93f2f93710005f71bc972826099; https://github.com/getredash/redash/security/advisories/GHSA-fcpv-hgq6-87h7; https://github.com/getredash/redash/commit/61bbb5aa7a23a93f2f93710005f71bc972826099
CVE: CVE-2021-21980
Published: 2021-11-24
Description: The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2021-0027.html; https://www.vmware.com/security/advisories/VMSA-2021-0027.html
CVE: CVE-2021-22049
Published: 2021-11-24
Description: The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client (vSAN UI) plug-in. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://www.vmware.com/security/advisories/VMSA-2021-0027.html; https://www.vmware.com/security/advisories/VMSA-2021-0027.html
CVE: CVE-2021-34423
Published: 2021-11-24
Description: A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom On-Premise Meeting Connector Controller before version 4.8.12.20211115, Zoom On-Premise Meeting Connector MMR before version 4.8.12.20211115, Zoom On-Premise Recording Connector before version 5.1.0.65.20211116, Zoom On-Premise Virtual Room Connector before version 4.4.7[PII_REDACTED]7, Zoom On-Premise Virtual Room Connector Load Balancer before version 2.5.5[PII_REDACTED]7, Zoom Hybrid Zproxy before version 1.0.[PII_REDACTED]6, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64. This can potentially allow a malicious actor to crash the service or application, or leverage this vulnerability to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://packetstormsecurity.com/files/165417/Zoom-Chat-Message-Processing-Buffer-Overflow.html; https://explore.zoom.us/en/trust/security/security-bulletin; http://packetstormsecurity.com/files/165417/Zoom-Chat-Message-Processing-Buffer-Overflow.html
CVE: CVE-2021-34424
Published: 2021-11-24
Description: A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for Android and iOS) before version 5.8.4, Zoom Client for Meetings for Chrome OS before version 5.0.1, Zoom Rooms for Conference Room (for Android, AndroidBali, macOS, and Windows) before version 5.8.3, Controllers for Zoom Rooms (for Android, iOS, and Windows) before version 5.8.3, Zoom VDI Windows Meeting Client before version 5.8.4, Zoom VDI Azure Virtual Desktop Plugins (for Windows x86 or x64, IGEL x64, Ubuntu x64, HP ThinPro OS x64) before version 5.8.4.21112, Zoom VDI Citrix Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom VDI VMware Plugins (for Windows x86 or x64, Mac Universal Installer & Uninstaller, IGEL x64, eLux RP6 x64, HP ThinPro OS x64, Ubuntu x64, CentOS x 64, Dell ThinOS) before version 5.8.4.21112, Zoom Meeting SDK for Android before version 5.7.6.1922, Zoom Meeting SDK for iOS before version 5.7.6.1082, Zoom Meeting SDK for macOS before version 5.7.6.1340, Zoom Meeting SDK for Windows before version 5.7.6.1081, Zoom Video SDK (for Android, iOS, macOS, and Windows) before version 1.1.2, Zoom on-premise Meeting Connector before version 4.8.12.20211115, Zoom on-premise Meeting Connector MMR before version 4.8.12.20211115, Zoom on-premise Recording Connector before version 5.1.0.65.20211116, Zoom on-premise Virtual Room Connector before version 4.4.7[PII_REDACTED]7, Zoom on-premise Virtual Room Connector Load Balancer before version 2.5.5[PII_REDACTED]7, Zoom Hybrid Zproxy before version 1.0.[PII_REDACTED]6, and Zoom Hybrid MMR before version 4.6.20211116.131_x86-64 which potentially allowed for the exposure of the state of process memory. This issue could be used to potentially gain insight into arbitrary areas of the product's memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://packetstormsecurity.com/files/165419/Zoom-MMR-Server-Information-Leak.html; https://explore.zoom.us/en/trust/security/security-bulletin; http://packetstormsecurity.com/files/165419/Zoom-MMR-Server-Information-Leak.html
CVE: CVE-2021-36916
Published: 2021-11-24
Description: The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP address is retrieved and used inside a SQL query. The function "hmwp_get_user_ip" tries to retrieve the IP address from multiple headers, including IP address headers that the user can spoof, such as "X-Forwarded-For." As a result, the malicious payload supplied in one of these IP address headers will be directly inserted into the SQL query, making SQL injection possible.
CVSS Score: 8.6 (HIGH)
CWE: CWE-89, CWE-89
References: https://codecanyon.net/item/hide-my-wp-amazing-security-plugin-for-wordpress/4177158; https://patchstack.com/database/vulnerability/hide-my-wp/wordpress-hide-my-wp-premium-plugin-6-2-3-sql-injection-sqli-vulnerability; https://patchstack.com/hide-my-wp-vulnerabilities-fixed/
CVE: CVE-2021-36917
Published: 2021-11-24
Description: WordPress Hide My WP plugin (versions <= 6.2.3) can be deactivated by any unauthenticated user. It is possible to retrieve a reset token which can then be used to deactivate the plugin.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://codecanyon.net/item/hide-my-wp-amazing-security-plugin-for-wordpress/4177158; https://patchstack.com/database/vulnerability/hide-my-wp/wordpress-hide-my-wp-premium-plugin-6-2-3-unauthenticated-plugin-deactivation-vulnerability; https://patchstack.com/hide-my-wp-vulnerabilities-fixed/
CVE: CVE-2021-38873
Published: 2021-11-24
Description: IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/208396; https://www.ibm.com/support/pages/node/6517470; https://exchange.xforce.ibmcloud.com/vulnerabilities/208396
CVE: CVE-2021-43268
Published: 2021-11-24
Description: An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415
References: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2021-43268; https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2021-43268