CVE-2021-0308
Summary
| CVE | CVE-2021-0308 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-01-11 22:15:00 UTC |
|---|
| Updated | 2022-02-09 17:02:00 UTC |
|---|
| Description | In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Android Security Bulletin—January 2021 | Android Open Source Project |
CONFIRM |
source.android.com |
Vendor Advisory |
| GPT fdisk: Integer underflow (GLSA 202105-03) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| [SECURITY] [DLA 2549-1] gdisk security update |
MLIST |
lists.debian.org |
Mailing List, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160234 Oracle Enterprise Linux Security Update for gdisk (ELSA-2022-7700)
- 180116 Debian Security Update for gdisk (CVE-2021-0308)
- 240826 Red Hat Update for gdisk (RHSA-2022:7700)
- 500363 Alpine Linux Security Update for gptfdisk
- 501416 Alpine Linux Security Update for gptfdisk
- 503984 Alpine Linux Security Update for gptfdisk
- 671577 EulerOS Security Update for gdisk (EulerOS-SA-2022-1532)
- 671658 EulerOS Security Update for gdisk (EulerOS-SA-2022-1720)
- 710112 Gentoo Linux GPT fdisk Integer underflow vulnerability (GLSA 202105-03)
- 940743 AlmaLinux Security Update for gdisk (ALSA-2022:7700)
- 960393 Rocky Linux Security Update for gdisk (RLSA-2022:7700)
