CVE-2021-42341 Memory corruption in n/a
A buffer overflow in OpenRC's checkpath function allows attackers to cause memory corruption, potentially leading to code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-42341?
CVE-2021-42341 is a high-severity memory corruption vulnerability in n/a, published on 14 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the '\0' byte at the end of the string. This results in memory corruption. CVE-2021-42341 was introduced in git commit 63db2d99e730547339d1bdd28e8437999c380cae, which was introduced as part of OpenRC 0.44.0 development.
Which versions are affected by CVE-2021-42341?
It affects 1 product.
Products include Openrc Project Openrc.
How do I fix CVE-2021-42341?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-42341 being exploited?
There is no known exploitation of CVE-2021-42341 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as ALPINE-CVE-2021-42341, CLEANSTART-2024-TD30600, GHSA-3fxr-g4w3-xwx9.