Vulnerability CVE-2021-42341


Published: 2021-10-14

Description:
checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the '\0' byte at the end of the string. This results in memory corruption.

 References:
https://github.com/OpenRC/openrc/issues/459
https://github.com/OpenRC/openrc/commit/bb8334104baf4d5a4a442a8647fb9204738f2204
https://bugs.gentoo.org/816900
https://github.com/OpenRC/openrc/pull/462

Copyright 2021, cxsecurity.com

 

Back to Top