SecuritySpace - CVE-2021-40647

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2021-40647

Description: In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it allows arbitrary write anywhere in the programs memory.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-40647
https://gist.github.com/untaman/cb58123fe89fc65e3984165db5d40933

CVE ID:	CVE-2021-40647
Description:	In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it allows arbitrary write anywhere in the programs memory.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-40647 https://gist.github.com/untaman/cb58123fe89fc65e3984165db5d40933