PT-2021-19687
CVE-2021-32282
·
Published
2021-09-20
·
Updated
2022-05-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
gravity versions through 0.8.1
Description:
The issue is related to a NULL pointer dereference in the
ircode add check() function located in gravity ircode.c. This allows an attacker to cause Denial of Service.Recommendations:
For gravity versions through 0.8.1, consider disabling the
ircode add check() function as a temporary workaround until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾