CVE-2021-41497

Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket.
References
Link Resource
https://github.com/RaRe-Technologies/bounter/issues/47 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:rare-technologies:bounter:1.01:*:*:*:*:*:*:*
cpe:2.3:a:rare-technologies:bounter:1.10:*:*:*:*:*:*:*

History

27 Dec 2021, 19:51

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
CWE CWE-476
References (MISC) https://github.com/RaRe-Technologies/bounter/issues/47 - (MISC) https://github.com/RaRe-Technologies/bounter/issues/47 - Exploit, Issue Tracking, Third Party Advisory
CPE cpe:2.3:a:rare-technologies:bounter:1.01:*:*:*:*:*:*:*
cpe:2.3:a:rare-technologies:bounter:1.10:*:*:*:*:*:*:*

17 Dec 2021, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-12-17 21:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-41497

Mitre link : CVE-2021-41497

CVE.ORG link : CVE-2021-41497


JSON object : View

Products Affected

rare-technologies

  • bounter
CWE
CWE-476

NULL Pointer Dereference