rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-3544 
Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime.
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: n/a
product: QEMU
Published: 2021-06-02T13:30:24.000Z
CVE-2021-3545 
An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host.
Problem types: cwe_id: CWE-908
description: CWE-908->CWE-200
Affected products: vendor: n/a
product: QEMU
Published: 2021-06-02T13:30:27.000Z
CVE-2021-3546 
An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: QEMU
Published: 2021-06-02T13:30:30.000Z
CVE-2021-3547 
OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an unrelated server certificate using the same hostname found in the verify-x509-name option in a client configuration.
Problem types: cwe_id: CWE-305
description: CWE-305: Authentication Bypass by Primary Weakness
Affected products: vendor: n/a
product: OpenVPN 3 Core Library
Published: 2021-07-12T10:35:52.000Z
CVE-2021-3548 
A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: dmg2img
Published: 2021-05-26T20:32:33.000Z
CVE-2021-3549 
An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: binutils
Published: 2021-05-26T20:41:11.000Z
CVE-2021-3550 
A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation.
Problem types: cwe_id: CWE-427
description: CWE-427 Uncontrolled Search Path Element
Affected products: vendor: Lenovo
product: PCManager
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Lenovo thanks Hou JingYi (@hjy79425575) of Qihoo 360 CERT for reporting this issue.
Published: 2021-07-16T20:30:19.000Z
CVE-2021-3551 
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.
Problem types: cwe_id: CWE-312
description: CWE-312
Affected products: vendor: n/a
product: pki-server
Published: 2022-02-16T16:37:57.000Z
CVE-2021-3552 Insufficient validation on regular expression in EPPUpdateService config file (VA-9825)
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender GravityZone 6.24.1-1.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: Bitdefender
product: Endpoint Security Tools
vendor: Bitdefender
product: GravityZone
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: Nicolas VERDIER, Cybersecurity Consultant at TEHTRIS
Published: 2021-11-24T14:40:13.004Z
CVE-2021-3553 Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint for Linux versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: Bitdefender
product: Endpoint Security Tools
vendor: Bitdefender
product: Unified Endpoint for Linux
vendor: Bitdefender
product: GravityZone
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Nicolas VERDIER, Cybersecurity Consultant at TEHTRIS
Published: 2021-11-24T14:45:20.276Z
CVE-2021-3554 Improper Access Control vulnerability in the patchesUpdate API
Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Bitdefender
product: Endpoint Security Tools for Linux
vendor: Bitdefender
product: Unified Endpoint
vendor: Bitdefender
product: GravityZone
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Nicolas VERDIER, Cybersecurity Consultant at TEHTRIS
Published: 2021-11-24T14:45:12.904Z
CVE-2021-3555 
A Buffer Overflow vulnerability in the RSTP server component of Eufy Indoor 2K Indoor Camera allows a local attacker to achieve remote code execution. This issue affects: Eufy Indoor 2K Indoor Camera 2.0.9.3 version and prior versions.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: Eufy
product: Indoor 2K Indoor Camera
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Bitdefender Labs
Published: 2022-05-31T09:45:12.553Z
CVE-2021-3557 
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-server, the unprivileged user is able to read all resources of the cluster including all secrets which might enable privilege escalations. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: n/a
product: argocd
Published: 2022-02-16T16:37:57.000Z
CVE-2021-3559 
A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that supports mediated devices (e.g., GRID driver). This flaw could be used by an unprivileged client with a read-only connection to crash the libvirt daemon by executing the 'nodedev-list' virsh command. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: libvirt
Published: 2021-05-24T11:55:02.000Z
CVE-2021-3560 
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: n/a
product: polkit
Published: 2022-02-16T00:00:00.000Z
CVE-2021-3561 
An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: fig2dev
Published: 2021-05-26T21:27:36.000Z
CVE-2021-3563 
A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.
Problem types: cwe_id: CWE-863
description: CWE-863 - Incorrect Authorization
Affected products: vendor: n/a
product: keystone
Published: 2022-08-26T15:25:41.000Z
CVE-2021-3564 
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13.
Problem types: cwe_id: CWE-415
description: CWE-415
Affected products: vendor: n/a
product: kernel
Published: 2021-06-08T11:59:04.000Z
CVE-2021-3565 
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-665
description: CWE-665->CWE-200
Affected products: vendor: n/a
product: tpm2-tools
Published: 2021-06-04T11:39:40.000Z
CVE-2021-3566 
Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg).
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: ffmpeg
Published: 2021-08-05T20:21:37.000Z
CVE-2021-3567 
A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: caribou
Published: 2022-03-25T18:02:48.000Z
CVE-2021-3569 
A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SIGBUS (bad memory access) and termination of swtpm. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-120
description: CWE-120
Affected products: vendor: n/a
product: libtpms
Published: 2021-06-03T11:05:49.000Z
CVE-2021-3570 
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: linuxptp
Published: 2021-07-09T10:33:01.000Z
CVE-2021-3571 
A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: linuxptp
Published: 2021-07-09T10:33:09.000Z
CVE-2021-3572 
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: python-pip
Published: 2021-11-10T17:55:47.000Z
CVE-2021-3573 
A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.
Problem types: cwe_id: CWE-362
description: CWE-362->CWE-416
Affected products: vendor: n/a
product: kernel
Published: 2021-08-13T00:00:00.000Z
CVE-2021-3574 
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.
Problem types: cwe_id: CWE-401
description: CWE-401 - Missing Release of Memory after Effective Lifetime
Affected products: vendor: n/a
product: ImageMagick
Published: 2022-08-26T00:00:00.000Z
CVE-2021-3575 
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: OpenJPEG
Published: 2022-03-04T17:20:40.000Z
CVE-2021-3576 Privilege escalation via SeImpersonatePrivilege
Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 25.0.26.
Problem types: cwe_id: CWE-250
description: CWE-250 Execution with Unnecessary Privileges
Affected products: vendor: Bitdefender
product: Endpoint Security Tools
vendor: Bitdefender
product: Total Security
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Zero-Day Initiative (ZDI)
Published: 2021-10-28T13:50:23.098Z
CVE-2021-3577 
An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized access to the device.
Problem types: cwe_id: CWE-78
description: CWE-78 OS Command Injection
Affected products: vendor: Motorola
product: Binatone Hubble Cameras
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Motorola thanks Randy Westergren for reporting this issue.
Published: 2021-11-12T22:05:31.000Z
CVE-2021-3578 
A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote code execution on the client.
Problem types: cwe_id: CWE-704
description: CWE-704
Affected products: vendor: n/a
product: isync
Published: 2022-02-16T18:35:33.000Z
CVE-2021-3579 Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe
Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.
Problem types: cwe_id: CWE-276
description: CWE-276 Incorrect Default Permissions
Affected products: vendor: Bitdefender
product: ENdpoint Security Tools for Windows
vendor: Bitdefender
product: Total Security
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Michael DePlante of Trend Micro Zero Day Initiative
Published: 2021-10-28T13:50:14.759Z
CVE-2021-3580 
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: nettle
Published: 2021-08-05T00:00:00.000Z
CVE-2021-3581 Buffer Access with Incorrect Length Value in zephyr
Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5
Problem types: cwe_id: CWE-805
description: Buffer Access with Incorrect Length Value (CWE-805)
Affected products: vendor: zephyrproject-rtos
product: zephyr
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Published: 2021-10-05T20:50:18.826Z
CVE-2021-3582 
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: QEMU
Published: 2022-03-25T18:02:49.000Z
CVE-2021-3583 
A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-77
Affected products: vendor: n/a
product: ansible
Published: 2021-09-22T00:00:00.000Z
CVE-2021-3584 
A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.
Problem types: cwe_id: CWE-78
description: CWE-78
Affected products: vendor: n/a
product: foreman
Published: 2021-12-23T19:48:46.000Z
CVE-2021-3585 
A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager.
Problem types: cwe_id: CWE-200
description: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: openstack/tripleo-heat-templates.
Published: 2022-08-26T15:25:41.000Z
CVE-2021-3586 
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-1188
description: CWE-1188 - Insecure Default Initialization of Resource
Affected products: vendor: n/a
product: servicemesh-operator
Published: 2022-08-22T14:46:32.000Z
CVE-2021-3588 memory contents disclosure in cli_feat_read_cb
The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.
Problem types: cwe_id: CWE-788
description: CWE-788 Access of Memory Location After End of Buffer
cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: BlueZ
product: BlueZ
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2021-06-10T02:30:11.654Z