CVE-2021-39176 - Vulnerability Details - OpenCVE

ReportizFlow

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Detect-character-encoding Project	Detect-character-encoding

Configuration 1 [-]

cpe:2.3:a:detect-character-encoding_project:detect-character-encoding:*:*:*:*:*:node.js:*:*

No data.

References

Link	Providers
https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588
https://github.com/sonicdoe/detect-character-encoding/pull/6
https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1
https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2021-08-31T18:05:12

Updated: 2024-08-04T01:58:18.257Z

Reserved: 2021-08-16T00:00:00

Link: CVE-2021-39176

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-08-31T18:15:08.490

Modified: 2024-11-21T06:18:47.893

Link: CVE-2021-39176

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "detect-character-encoding", "vendor": "sonicdoe", "versions": [{"status": "affected", "version": "< 0.3.1"}]}], "descriptions": [{"lang": "en", "value": "detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-401", "description": "CWE-401: Missing Release of Memory after Effective Lifetime", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-08-31T18:05:12", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/sonicdoe/detect-character-encoding/pull/6"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1"}], "source": {"advisory": "GHSA-5rwj-j5m3-3chj", "discovery": "UNKNOWN"}, "title": "Missing Release of Memory after Effective Lifetime in detect-character-encoding", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2021-39176", "STATE": "PUBLIC", "TITLE": "Missing Release of Memory after Effective Lifetime in detect-character-encoding"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "detect-character-encoding", "version": {"version_data": [{"version_value": "< 0.3.1"}]}}]}, "vendor_name": "sonicdoe"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-401: Missing Release of Memory after Effective Lifetime"}]}]}, "references": {"reference_data": [{"name": "https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj", "refsource": "CONFIRM", "url": "https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj"}, {"name": "https://github.com/sonicdoe/detect-character-encoding/pull/6", "refsource": "MISC", "url": "https://github.com/sonicdoe/detect-character-encoding/pull/6"}, {"name": "https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588", "refsource": "MISC", "url": "https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588"}, {"name": "https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1", "refsource": "MISC", "url": "https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1"}]}, "source": {"advisory": "GHSA-5rwj-j5m3-3chj", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T01:58:18.257Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/sonicdoe/detect-character-encoding/pull/6"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1"}]}]}, "cveMetadata": {"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2021-39176", "datePublished": "2021-08-31T18:05:12", "dateReserved": "2021-08-16T00:00:00", "dateUpdated": "2024-08-04T01:58:18.257Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:detect-character-encoding_project:detect-character-encoding:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "3CF1A106-C4DA-464C-A449-5E4B585F9CE4", "versionEndExcluding": "0.3.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1."}, {"lang": "es", "value": "detect-character-encoding es un paquete para detectar la codificaci\u00f3n de caracteres usando ICU. En detect-character-encoding versiones v0.3.0 y anteriores, la memoria asignada no es liberada. El problema ha sido parcheado en detect-character-encoding versi\u00f3n v0.3.1"}], "id": "CVE-2021-39176", "lastModified": "2024-11-21T06:18:47.893", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}]}, "published": "2021-08-31T18:15:08.490", "references": [{"source": "[email protected]", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588"}, {"source": "[email protected]", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://github.com/sonicdoe/detect-character-encoding/pull/6"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1"}, {"source": "[email protected]", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/sonicdoe/detect-character-encoding/commit/d44356927b92e3b13e178071bf6d7c671766f588"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://github.com/sonicdoe/detect-character-encoding/pull/6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.3.1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://github.com/sonicdoe/detect-character-encoding/security/advisories/GHSA-5rwj-j5m3-3chj"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "[email protected]", "type": "Secondary"}]}