CVE-2021-45972
Published: 01 January 2022
Summary
CVE-2021-45972 is a high-severity Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability in Debian Debian Linux. Its CVSS base score is 7.1 (High).
Operationally, ranked at the 40.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-32678
Vulnerability details
The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer…
more
with arbitrary data.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.