Beveiligingsadvies

CVE-2021-33574

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-05-25 00:00:00
Laatst bijgewerkt 2024-08-03 23:50:43
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.