CVE-2021-38604 — NULL Pointer Dereference in Glibc

CWE-476 — NULL Pointer Dereference7 documents7 sources
Severity
7.5HIGHNVD
CNA9.8OSV9.8
EPSS
0.1%
top 72.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
GNU GlibcFedoraproject FedoraOracle Communications Cloud Native Core Binding Support Function+5 more
Timeline
PublishedAug 12
Latest updateMay 24

Description

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages8 packages

▶Ubuntugnu/glibc< 2.34-0ubuntu3
▶NVDgnu/glibc2.34

Also affects: Fedora 35

Patches

Patch: sourceware.org ↗Patch: www.oracle.com ↗Patch: sourceware.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-p3v7-wjmc-7fh8: In librt in the GNU C Library (aka glibc) through 2↗2022-05-24
▶
CVEList
CVE-2021-38604: In librt in the GNU C Library (aka glibc) through 2↗2021-08-12
▶
OSV
CVE-2021-38604: In librt in the GNU C Library (aka glibc) through 2↗2021-08-12
▶

📋Vendor Advisories

3
Microsoft
In librt in the GNU C Library (aka glibc) through 2.34 sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data leading to a NULL pointer dereference. NOTE: this vulnerability was in↗2021-08-10
▶
Red Hat
glibc: NULL pointer dereference in helper_thread() in mq_notify.c while handling NOTIFY_REMOVED messages↗2021-08-09
▶
Debian
CVE-2021-38604: glibc - In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/...↗2021
▶
CVE-2021-38604 — NULL Pointer Dereference in GNU Glibc | cvebase