CVE-2021-45940

Description

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c).

Affected packages (2)

• Bitnami/bpftool>= 0.6.0, <= 0.6.0, >= 0.6.1, <= 0.6.1
• Debian/libbpffrom 0

CVSS scores

References (3)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2021-45940
• WEBhttps://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868
• WEBhttps://github.com/google/oss-fuzz-vulns/blob/main/vulns/libbpf/OSV-2021-1562.yaml