CVE-2021-42523
CVE-2021-42523
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
25 Aug 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.
Affected products
n/a · colordWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →