漏洞标题
N/A
漏洞描述信息
在OpenRC 0.44.7之前,checkpath 使用 strlen() 的直接输出来分配字符串,这没有考虑到字符串末尾的 '\0' 字节。这会导致内存泄漏。CVE-2021-42341 出现在gitcommit 63db2d99e730547339d1bdd28e8437999c380cae中,这是OpenRC 0.44.0开发的一部分。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the '\0' byte at the end of the string. This results in memory corruption. CVE-2021-42341 was introduced in git commit 63db2d99e730547339d1bdd28e8437999c380cae, which was introduced as part of OpenRC 0.44.0 development.
CVSS信息
N/A
漏洞类别
N/A