CVE-2021-40394
published 2021-12-22CVE-2021-40394: An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the…
PriorityP352critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.92%
85.5th percentile
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit 71493260). A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | gerbv | < gerbv 2.8.1-1 (bookworm) | gerbv 2.8.1-1 (bookworm) |
| gerbv_project | gerbv | — | — |
| gerbv_project | gerbv | — | — |
| gerbv_project | gerbv | >= 0 < 2.7.0-2+deb11u2 | 2.7.0-2+deb11u2 |
| gerbv_project | gerbv | >= 0 < 2.8.1-1 | 2.8.1-1 |
| gerbv_project | gerbv | >= 0 < 2.8.1-1 | 2.8.1-1 |
| gerbv_project | gerbv | >= 0 < 2.7.0-1ubuntu0.1 | 2.7.0-1ubuntu0.1 |
| gerbv_project | gerbv | >= 0 < 2.6.0-1ubuntu0.14.04.1~esm1 | 2.6.0-1ubuntu0.14.04.1~esm1 |
| gerbv_project | gerbv | >= 0 < 2.6.0-1ubuntu0.16.04.1~esm1 | 2.6.0-1ubuntu0.16.04.1~esm1 |
| gerbv_project | gerbv | >= 0 < 2.6.1-3ubuntu0.1~esm1 | 2.6.1-3ubuntu0.1~esm1 |
| gerbv_project | gerbv | >= 0 < 2.8.2-1ubuntu0.1~esm1 | 2.8.2-1ubuntu0.1~esm1 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.010.0CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Gerbv vulnerabilities
osv·2023-07-07·CVSS 9.8
CVE-2021-40391 [CRITICAL] Gerbv vulnerabilities
Gerbv vulnerabilities
Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber
files. An attacker could possibly use this issue to crash Gerbv (resulting
in a denial of service), or execute arbitrary code. This issue only
affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS. (CVE-2021-40391, CVE-2021-40394)
Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber
files. An attacker could possibly use this issue to disclose information,
crash Gerbv (resulting in a denial of service), or execute arbitrary code.
This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, and Ubuntu 20.04 LTS. (CVE-2021-40393)
Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber
files. An attacker could pos
GHSA
GHSA-936x-jwpc-5p28: An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2
ghsa_unreviewed·2021-12-23
CVE-2021-40394 [HIGH] CWE-787 GHSA-936x-jwpc-5p28: An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit 71493260). A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
OSV
CVE-2021-40394: An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2
osv·2021-12-22·CVSS 9.8
CVE-2021-40394 [CRITICAL] CVE-2021-40394: An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit 71493260). A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Debian
CVE-2021-40394: gerbv - An out-of-bounds write vulnerability exists in the RS-274X aperture macro variab...
vendor_debian·2021·CVSS 9.8
CVE-2021-40394 [CRITICAL] CVE-2021-40394: gerbv - An out-of-bounds write vulnerability exists in the RS-274X aperture macro variab...
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and the forked version of Gerbv (commit 71493260). A specially-crafted gerber file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Scope: local
bookworm: resolved (fixed in 2.8.1-1)
bullseye: resolved (fixed in 2.7.0-2+deb11u2)
sid: resolved (fixed in 2.8.1-1)
trixie: resolved (fixed in 2.8.1-1)
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Vulnerabilities in Gerbv could lead to code execution, information disclosure
blogs_talos·2022-02-24·CVSS 9.8
[CRITICAL] Vulnerability Spotlight: Vulnerabilities in Gerbv could lead to code execution, information disclosure
## Vulnerability Spotlight: Vulnerabilities in Gerbv could lead to code execution, information disclosure
Claudio Bozzato of Cisco Talos discovered these vulnerabilities.
Cisco Talos recently discovered multiple vulnerabilities in the Gerbv file viewing software that could allow an attacker to execute arbitrary remote code or disclose sensitive information.
Gerbv is an open-source software that allows users to view RS-274X Gerber files, Excellon drill files and pick-n-place files — all common file formats used to display layers of a circuit board and other computer parts. All of these vulnerabilities exist in the function that allows Gerbv to open Gerber files. Gerbv can be used as a standalone GUI application, or as a library.
TALOS-2021-1402 (CVE-2021-40391), TALOS-2021-1404 (CVE-202
Talos
Vulnerability Spotlight: Vulnerabilities in Gerbv could lead to code execution, information disclosure
blogs_talos·2022-02-24·CVSS 9.8
[CRITICAL] Vulnerability Spotlight: Vulnerabilities in Gerbv could lead to code execution, information disclosure
Claudio Bozzato of Cisco Talos discovered these vulnerabilities.
Cisco Talos recently discovered multiple vulnerabilities in the Gerbv file viewing software that could allow an attacker to execute arbitrary remote code or disclose sensitive information.
Gerbv is an open-source software that allows users to view RS-274X Gerber files, Excellon drill files and pick-n-place files — all common file formats used to display layers of a circuit board and other computer parts. All of these vulnerabilities exist in the function that allows Gerbv to open Gerber files. Gerbv can be used as a standalone GUI application, or as a library.
TALOS-2021-1402 (CVE-2021-40391), TALOS-2021-1404 (CVE-2021-40393), TALOS-2021-1405 (CVE-2021-40394) and TALOS-2021-1415 (CVE-2021-40401) could all be triggered if a
https://lists.debian.org/debian-lts-announce/2023/09/msg00040.htmlhttps://talosintelligence.com/vulnerability_reports/TALOS-2021-1404https://www.debian.org/security/2022/dsa-5306https://lists.debian.org/debian-lts-announce/2023/09/msg00040.htmlhttps://talosintelligence.com/vulnerability_reports/TALOS-2021-1404https://www.debian.org/security/2022/dsa-5306
2021-12-22
Published