VDB
CVE-2021-45940
CVE-2021-45940
PUBLISHED
CVSS 6.5 MEDIUM
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).
EPSS 1.25% · 69.2th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
1.25%
69.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| libbpf_project | libbpf | 0.6.0, 0.6.1 |
| n/a | n/a | n/a |
Timeline
- Dec 31, 2021 CVE Published
- Jan 1, 2022 EPSS Score
- Feb 25, 2022 EPSS Score
- Apr 20, 2022 EPSS Score
- Jun 14, 2022 EPSS Score
- Aug 8, 2022 EPSS Score
- Oct 2, 2022 EPSS Score
- Nov 25, 2022 EPSS Score
- Jan 19, 2023 EPSS Score
- Mar 14, 2023 EPSS Score
- May 8, 2023 EPSS Score
- Jul 2, 2023 EPSS Score