EXPOSURES › CVE-2021-33574
CVE-2021-33574
CRITICAL
DETAIL
SourceNVD · cve
Published2021-05-25
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-33574 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
NetApp · vendordebian · vendorfedoraproject · vendorgnu · vendorcloud backup · productdebian linux · producte-series santricity os controller · productfedora · productglibc · producth300e · producth300e firmware · producth300s · producth300s firmware · producth410s · producth410s firmware · producth500e · producth500e firmware · producth500s · producth500s firmware · producth700e · producth700e firmware · producth700s · producth700s firmware · productsolidfire baseboard management controller firmware · product
DESCRIPTION
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
AFFECTED FEDRAMP PRODUCTS · 1
| PRODUCT | STATUS |
|---|---|
| Cloud Insights NetApp |
In Process |