What is CVE-2021-40391?

CVE-2021-40391 is a critical-severity vulnerability in Gerbv, classified under CWE-390. CVSS score: 10.0/10. Published 2021-11-19.

How severe is CVE-2021-40391?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Vulnerability in Gerbv

CVE-2021-40391

An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file can lead to code exec…

EPSS: 0.005 (65.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

N/a Gerbv — versions Gerbv 2.7.0 , Gerbv dev (commit b5f1eacd) ,Gerbv forked dev (commit 71493260)

Weakness classification (CWE)

CWE-390

References

www.talosintelligence.com/vulnerability_reports/TALOS-2021-1402 (x_refsource_MISC)
[debian-lts-announce] 20211203 [SECURITY] [DLA 2839-1] gerbv security update (mailing-list, x_refsource_MLIST)
FEDORA-2022-4a3ef86baa (vendor-advisory, x_refsource_FEDORA)

Frequently asked questions

What is CVE-2021-40391?: CVE-2021-40391 is a critical-severity vulnerability in Gerbv, classified under CWE-390. CVSS score: 10.0/10. Published 2021-11-19.
How severe is CVE-2021-40391?: Critical severity. CVSS v3 base score is 10.0 out of 10.