Homepage

Out-of-bounds Write The advisory has been revoked - it doesn't affect any version of package virt:rhel/virt-v2v-bash-completion  (opens in a new tab)

Threat Intelligence

EPSS
0.05% (21st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ALMALINUX8-VIRT-8067139
  • published20 Sept 2024
  • disclosed10 May 2022
Report a new vulnerability Found a mistake?

Introduced: 10 May 2022

CVE-2021-33287  (opens in a new tab)
CWE-787  (opens in a new tab)

Amendment

The AlmaLinux security team deemed this advisory irrelevant for AlmaLinux:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream virt:rhel/virt-v2v-bash-completion package and not the virt:rhel/virt-v2v-bash-completion package as distributed by AlmaLinux.

In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application.

References