Vulnerability · Published Aug 25, 2022 · Assigned by fedora

CVE-2021-42522

High 7.5

In plain English

A high-severity information exposure in GNOME anjuta. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.8%top 42.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' to release the return value of 'xmlGetProp()'.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	anjuta	no fix listed	DEBIAN-CVE-2021-42522
Ubuntu:22.04:LTS	anjuta	no fix listed	UBUNTU-CVE-2021-42522

Affected products (as reported)

Vendor	Product	Versions
n/a	GNOME anjuta	anjuta - 2.0.0

Weakness: CWE-200

References

https://gitlab.gnome.org/GNOME/anjuta/-/issues/12 x_refsource_MISC