CVE-2021-29507: dlt-daemon could crash if there is special character in dlt.conf
GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail to generate their dlt logs in system. As of time of publication, no patch exists. As a workaround, one may check the integrity of information in configuration file manually.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29507?
CVE-2021-29507 has been rated as medium severity due to its potential to cause application crashes.
How do I fix CVE-2021-29507?
To fix CVE-2021-29507, update GENIVI Diagnostic Log and Trace to version 2.18.7 or later, as it addresses the issue.
Which versions of GENIVI Diagnostic Log and Trace are affected by CVE-2021-29507?
CVE-2021-29507 affects versions from 2.10.0 to 2.18.6 of GENIVI Diagnostic Log and Trace.
Is CVE-2021-29507 a denial-of-service vulnerability?
Yes, CVE-2021-29507 can lead to denial-of-service conditions by causing the application to crash.
What types of configurations are impacted by CVE-2021-29507?
CVE-2021-29507 is triggered by configuration files containing special characters.