CVE-2021-29507
Last modified
CVE-2021-29507 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. EPSS estimates a 0.75% chance of exploitation in the next 30 days.
Description
GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail to generate their dlt logs in system. As of time of publication, no patch exists. As a workaround, one may check the integrity of information in configuration file manually.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Genivi | Diagnostic Log And Trace | >= 2.10.0, <= 2.18.6 |
References
- https://github.com/GENIVI/dlt-daemon/security/advisories/GHSA-7cqp-2hqj-mh3fThird Party Advisory
- https://github.com/GENIVI/dlt-daemon/security/advisories/GHSA-7cqp-2hqj-mh3fThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-29507?
How severe is CVE-2021-29507?
How do I fix CVE-2021-29507?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-29501Ticketer is a command based ticket system cog (plugin) for t…6.5
- CVE-2021-29502WarnSystem is a cog (plugin) for the Red discord bot. A vuln…6.5
- CVE-2021-29503HedgeDoc is a platform to write and share markdown. HedgeDoc…6.1
- CVE-2021-29504WP-CLI is the command-line interface for WordPress. An impro…7.4
- CVE-2021-29505XStream is software for serializing Java objects to XML and …8.8
- CVE-2021-29506GraphHopper is an open-source Java routing engine. In GrassH…6.5
- CVE-2021-29508Due to how Wire handles type information in its serializatio…9.1
- CVE-2021-29509Puma is a concurrent HTTP 1.1 server for Ruby/Rack applicati…7.5
- CVE-2021-29510Pydantic is a data validation and settings management using …7.5
- CVE-2021-29511evm is a pure Rust implementation of Ethereum Virtual Machin…6.5
- CVE-2021-29512TensorFlow is an end-to-end open source platform for machine…7.8
- CVE-2021-29513TensorFlow is an end-to-end open source platform for machine…7.8
Are you affected by CVE-2021-29507?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
