Storage Encryption
1 CVEs
product
Monthly
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.
Buffer Overflow
OpenSSL
Debian Linux
Active Iq Unified Manager
Clustered Data Ontap
+27
NVD
GitHub
CVSS 3.1
9.8
EPSS
87.8%
CVE-2021-3711
Cargo
EPSS 88%
CVSS 9.8
CRITICAL
POC
PATCH
THREAT
Act Now
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.
Buffer Overflow
OpenSSL
Debian Linux
+29
NVD
GitHub