First published: Tue Jun 08 2021(Updated: )
Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF in the decompile.c file that causes a direct segmentation fault and leads to denial of service. Reference: <a href="https://github.com/libming/libming/issues/204">https://github.com/libming/libming/issues/204</a>
Credit: patrick@puiterwijk.org
Affected Software | Affected Version | How to fix |
---|---|---|
Libming Ming | =0.4.8 | |
Fedoraproject Fedora | =35 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-34341 is a vulnerability in Ming 0.4.8 that allows an out-of-bounds read in the decompileIF() function, leading to denial of service.
CVE-2021-34341 has a severity rating of 6.5, which is considered medium.
Ming 0.4.8 and Fedora 35 are affected by CVE-2021-34341.
To fix the CVE-2021-34341 vulnerability, update Ming to a version higher than 0.4.8.
You can find more information about CVE-2021-34341 at the following references: - [GitHub Issue](https://github.com/libming/libming/issues/204) - [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2057681) - [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1969628)