Log in Start free

Vulnerability · Published Apr 5, 2021 · Assigned by redhat

CVE-2021-20307

Critical 9.8

In plain English

A critical-severity security flaw in libpano13. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.9%top 19.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12libpano132.9.20~rc3+dfsg-1DEBIAN-CVE-2021-20307
Debian:13libpano132.9.20~rc3+dfsg-1DEBIAN-CVE-2021-20307
Debian:14libpano132.9.20~rc3+dfsg-1DEBIAN-CVE-2021-20307

Affected products (as reported)

VendorProductVersions
n/a libpano13 libpano13 2.9.20_rc3

Weakness: CWE-134

References