CVE-2021-26222

EUVD-2021-13039
The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
ezxml_projectezxml
𝑥
≤ 0.8.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mapcache
bookworm
unimportant
bullseye
ignored
buster
ignored
sid
unimportant
stretch
not-affected
trixie
unimportant
netcdf
bookworm
1:4.9.0-3
fixed
bullseye
ignored
buster
ignored
sid
1:4.9.2-7
fixed
stretch
not-affected
trixie
1:4.9.2-7
fixed
netcdf-parallel
bookworm
1:4.9.0-1
fixed
bullseye
ignored
buster
ignored
sid
1:4.9.0-4
fixed
stretch
not-affected
trixie
1:4.9.0-4
fixed
scilab
bookworm
unimportant
bullseye
ignored
buster
ignored
sid
unimportant
stretch
not-affected
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mapcache
bionic
needs-triage
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
dne
xenial
needs-triage
navit
bionic
needs-triage
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
dne
xenial
needs-triage
netcdf
bionic
needs-triage
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
needs-triage
xenial
needs-triage
netcdf-parallel
bionic
dne
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
dne
xenial
ignored
scilab
bionic
needs-triage
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
dne
xenial
needs-triage