CVE-2021-34341: Medium severity libming vulnerability

Published Jun 8, 2021

Updated

Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF in the decompile.c file that causes a direct segmentation fault and leads to denial of service.

Reference: https://github.com/libming/libming/issues/204

Other sources

Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a direct segmentation fault and leads to denial of service.

— MITRE

Affected Software

2 affected components

Libming Ming=0.4.8

Fedoraproject Fedora=35

Event History

Jun 8, 2021

Data Sourced

via Red Hat·06:50 PM

DescriptionSeverityAffected Software

Mar 7, 2022

CVE Published

via MITRE·10:01 PM

Data Sourced

via MITRE·10:01 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2021-34341?

CVE-2021-34341 is a vulnerability in Ming 0.4.8 that allows an out-of-bounds read in the decompileIF() function, leading to denial of service.

How severe is CVE-2021-34341?

CVE-2021-34341 has a severity rating of 6.5, which is considered medium.

What software versions are affected by CVE-2021-34341?

Ming 0.4.8 and Fedora 35 are affected by CVE-2021-34341.

How can I fix the CVE-2021-34341 vulnerability?

To fix the CVE-2021-34341 vulnerability, update Ming to a version higher than 0.4.8.

Where can I find more information about CVE-2021-34341?

You can find more information about CVE-2021-34341 at the following references: - [GitHub Issue](https://github.com/libming/libming/issues/204) - [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2057681) - [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1969628)