Enterprise Operations Monitor

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-43396 HIGH POC PATCH This Week

In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Glibc Communications Cloud Native Core Binding Support Function Communications Cloud Native Core Network Function Cloud Native Environment Communications Cloud Native Core Network Repository Function +3

NVD

CVSS 3.1

7.5

EPSS

3.1%

CVE-2021-38604 HIGH POC PATCH This Week

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Null Pointer Dereference Denial Of Service Glibc Fedora Communications Cloud Native Core Binding Support Function +5

NVD

CVSS 3.1

7.5

EPSS

3.0%

CVE-2021-43396

EPSS 3% CVSS 7.5

HIGH POC PATCH This Week

Information Disclosure Glibc Communications Cloud Native Core Binding Support Function +5

NVD

CVE-2021-38604

EPSS 3% CVSS 7.5

HIGH POC PATCH This Week

Null Pointer Dereference Denial Of Service Glibc +7

NVD