CVE-2021-40402 - log back

CVE-2021-40402 edited at 25 Nov 2021 20:37:55
Description
- An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv before version 2.8.1. A specially-crafted gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
+ An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.8.1. A specially-crafted gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
References
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1416
https://github.com/gerbv/gerbv/issues/80
- https://github.com/gerbv/gerbv/pull/61
- https://github.com/gerbv/gerbv/commit/8d7e005f8783d92de74192af21303619bef7541f
Notes
CVE-2021-40402 edited at 25 Nov 2021 20:35:30
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Information disclosure
Description
+ An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv before version 2.8.1. A specially-crafted gerber file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
References
+ https://talosintelligence.com/vulnerability_reports/TALOS-2021-1416
+ https://github.com/gerbv/gerbv/issues/80
+ https://github.com/gerbv/gerbv/pull/61
+ https://github.com/gerbv/gerbv/commit/8d7e005f8783d92de74192af21303619bef7541f
CVE-2021-40402 created at 25 Nov 2021 20:31:37