CVE-2021-3345

gcrymdblockwrite in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "12.0.0.3.0"
                },
                {
                    "last_affected": "12.0.0.3.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_billing_and_revenue_management",
            "cpes": [
                "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / git.gnupg.org/libgcrypt.git

Affected ranges

Type

GIT

Repo

git://git.gnupg.org/libgcrypt.git

Events

Introduced

0dc49af9b5371c5e2f766b70c3bede2b10db9f7e

Last affected

0dc49af9b5371c5e2f766b70c3bede2b10db9f7e

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.9.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.9.0"
        },
        {
            "last_affected": "1.9.0"
        }
    ]
}

Affected versions

1.*

1.9.0

libgcrypt-1.*

libgcrypt-1.9.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3345.json"

Git / github.com/gpg/libgcrypt

Affected ranges

Type

GIT

Repo

https://github.com/gpg/libgcrypt

Events

Introduced

0dc49af9b5371c5e2f766b70c3bede2b10db9f7e

Last affected

0dc49af9b5371c5e2f766b70c3bede2b10db9f7e

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.9.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.9.0"
        },
        {
            "last_affected": "1.9.0"
        }
    ]
}

Affected versions

1.*

1.9.0

libgcrypt-1.*

libgcrypt-1.9.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3345.json"