CVE-2021-38172 (CRITICAL 9.8) · Watchpost

← All vulnerabilities

CVE-2021-38172

CRITICAL 9.8CVE-2021-38172 · Published 05/02/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
perm debian	`= 0.4.0`	No fix yet

Description

perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.)

References

bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
lists.debian.org/debian-med/2021/08/msg00016.html · Mailing List
packages.qa.debian.org/p/perm.html · Issue Tracking
salsa.debian.org/med-team/perm/-/commits/master · Patch
tracker.debian.org/pkg/perm · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free