CVE-2021-33367: Buffer Overflow
First published: Wed Feb 22 2023(Updated: )
Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service via a crafted JXR file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Freeimage Project Freeimage | =3.18.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AXWMZOYJKXWOEEUV7ZKW4BX772F5P2HL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WEG5FTVLVSO26TEEYKORM42WZ4LEHIJB/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XXJ4QSLSK4HLH5ZDMDC42F7XLWLFADRD/
- https://sourceforge.net/p/freeimage/discussion/36109/thread/1a4db03d58/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEG5FTVLVSO26TEEYKORM42WZ4LEHIJB/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXWMZOYJKXWOEEUV7ZKW4BX772F5P2HL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXJ4QSLSK4HLH5ZDMDC42F7XLWLFADRD/
Frequently Asked Questions
What is CVE-2021-33367?
CVE-2021-33367 is a buffer overflow vulnerability in Freeimage v3.18.0 that allows an attacker to cause a denial of service via a crafted JXR file.
What is the severity of CVE-2021-33367?
The severity of CVE-2021-33367 is medium with a CVSS score of 5.5.
How can an attacker exploit CVE-2021-33367?
An attacker can exploit CVE-2021-33367 by sending a specially crafted JXR file to the vulnerable system, triggering a buffer overflow and causing a denial of service.
Is there a fix available for CVE-2021-33367?
Yes, upgrading Freeimage to version 3.18.1 or later fixes the vulnerability.
What CWE categories are associated with CVE-2021-33367?
CVE-2021-33367 is associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-125 (Out-of-bounds Read).
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/event
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/freeimage project
- canonical/freeimage project freeimage
- version/freeimage project freeimage/3.18.0