CVE-2021-32471 Code injection in n/a
Insufficient input validation in a theoretical Turing Machine implementation allows arbitrary code execution via crafted data, though it has no real-world implications.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-32471?
CVE-2021-32471 is a high-severity code injection vulnerability in n/a, published on 10 May 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs (instead of 0s and 1s). NOTE: the discoverer states "this vulnerability has no real-world implications."
Weakness: CWE-20
Which versions are affected by CVE-2021-32471?
It affects 1 product.
Products include Mit Universal Turing Machine.
How do I fix CVE-2021-32471?
No fix has been published for CVE-2021-32471 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2021-32471 being exploited?
There is no known exploitation of CVE-2021-32471 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-wqw3-6p9p-84x8.