high7.5
CVE-2021-27343
SerenityOS Unspecified is affected by: Buffer Overflow.
Impact
SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent). The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::der_decode_sequence() function. The attack vector is: Parsing RSA Key ASN.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Serenityos | Serenityos | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/SerenityOS/serenity/commit/48fbf6a88d4822a1e5470cf08f29464511bd72c1
- https://github.com/SerenityOS/serenity/issues/5317
- https://github.com/SerenityOS/serenity/pull/5344
- https://github.com/SerenityOS/serenity/commit/48fbf6a88d4822a1e5470cf08f29464511bd72c1
- https://github.com/SerenityOS/serenity/issues/5317
- https://github.com/SerenityOS/serenity/pull/5344