CVE-2021-45940
MEDIUMlibbpf 0.6.0 and 0.6.1 - Heap-Based Buffer Overflow in __bpf_object__open
Title source: llmDescription
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libbpf/OSV-2021-1562.yaml
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868
Scores
CVSS v3
6.5
EPSS
0.0113
EPSS Percentile
62.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-787
Status
published
Products (2)
libbpf_project/libbpf
0.6.0
libbpf_project/libbpf
0.6.1
Published
Jan 01, 2022
Tracked Since
Feb 18, 2026