medium6.5
CVE-2021-45940
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).
Impact
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libbpf Project | Libbpf | Versions 0.6.0, 0.6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libbpf/OSV-2021-1562.yaml
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libbpf/OSV-2021-1562.yaml