CVE-2021-45972

HIGH

giftrans 1.12.2 - Stack-Based Buffer Overflow via Input File Quantity Validation

Title source: llm
STIX 2.1

Description

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data.

References (3)

Core 3
Core References
Exploit, Mailing List, Third Party Advisory x_refsource_misc
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002739
Broken Link x_refsource_misc
http://web.archive.org/web/20150801185019/

Scores

CVSS v3 7.1
EPSS 0.0096
EPSS Percentile 56.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Details

CWE
CWE-1284
Status published
Products (4)
debian/debian_linux 9.0
debian/debian_linux 10.0
debian/debian_linux 11.0
giftrans_project/giftrans 1.12.2
Published Jan 01, 2022
Tracked Since Feb 18, 2026