CVE-2021-38423

Critical

All versions of GurumDDS improperly calculate the size to be used when allocating the buffer, which may result in a buffer overflow.

icscert·CWE-131·Published 2022-05-05

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

132 chars

All versions of GurumDDS improperly calculate the size to be used when allocating the buffer, which may result in a buffer overflow.

NVDen

132 chars

All versions of GurumDDS improperly calculate the size to be used when allocating the buffer, which may result in a buffer overflow.

Todas las versiones de GurumDDS calculan inapropiadamente el tamaño a usar cuando es asignado el búfer, lo que puede resultar en un desbordamiento del búfer

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	6.6	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
3.1	Primary	cve.org	6.6	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
3.1	Secondary	NVD	6.6	1.8	4.7	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H