CVE-2021-33574 log

Source
Severity Medium
Remote No
Type Arbitrary code execution
Description
The mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
Group Package Affected Fixed Severity Status Ticket
AVG-1621 glibc 2.33-5 Medium Vulnerable
References
https://sourceware.org/bugzilla/show_bug.cgi?id=27896