CVE-2021-42522 Information disclosure in GNOME anjuta
An information disclosure vulnerability in GNOME Anjuta allows attackers to read sensitive memory data due to a missing memory free call in the document manager plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-42522?
CVE-2021-42522 is a high-severity vulnerability in GNOME anjuta, published on 25 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' to release the return value of 'xmlGetProp()'.
Which versions are affected by CVE-2021-42522?
It affects 1 product.
Products include Gnome Anjuta.
How do I fix CVE-2021-42522?
No fix has been published for CVE-2021-42522 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-42522 being exploited?
There is no known exploitation of CVE-2021-42522 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2021-42522, GHSA-mxvm-wqqj-9w63, UBUNTU-CVE-2021-42522.