CVE-2021-32559

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-32559
An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md Third Party Advisory
https://github.com/mhammond/pywin32/issues/1700 Patch Third Party Advisory
https://github.com/mhammond/pywin32/pull/1701 Third Party Advisory
https://github.com/mhammond/pywin32/releases Release Notes Third Party Advisory
https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md Third Party Advisory
https://github.com/mhammond/pywin32/issues/1700 Patch Third Party Advisory
https://github.com/mhammond/pywin32/pull/1701 Third Party Advisory
https://github.com/mhammond/pywin32/releases Release Notes Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:pywin32_project:pywin32:*:*:*:*:*:*:*:*
History

21 Nov 2024, 06:07

Type Values Removed Values Added
References () https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md - Third Party Advisory () https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md - Third Party Advisory
References () https://github.com/mhammond/pywin32/issues/1700 - Patch, Third Party Advisory () https://github.com/mhammond/pywin32/issues/1700 - Patch, Third Party Advisory
References () https://github.com/mhammond/pywin32/pull/1701 - Third Party Advisory () https://github.com/mhammond/pywin32/pull/1701 - Third Party Advisory
References () https://github.com/mhammond/pywin32/releases - Release Notes, Third Party Advisory () https://github.com/mhammond/pywin32/releases - Release Notes, Third Party Advisory

14 Sep 2021, 14:40

Type Values Removed Values Added
References
  • (MISC) https://github.com/mhammond/pywin32/issues/1700 - Patch, Third Party Advisory
  • (MISC) https://github.com/mhammond/pywin32/pull/1701 - Third Party Advisory

09 Jul 2021, 13:00

Type Values Removed Values Added
References (MISC) https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md - (MISC) https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md - Third Party Advisory
References (MISC) https://github.com/mhammond/pywin32/releases - (MISC) https://github.com/mhammond/pywin32/releases - Release Notes, Third Party Advisory
CWE CWE-190
CPE cpe:2.3:a:pywin32_project:pywin32:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : 4.0
v3 : 6.5

06 Jul 2021, 12:36

Type Values Removed Values Added
New CVE
Information

Published : 2021-07-06 12:15

Updated : 2024-11-21 06:07

NVD link : CVE-2021-32559

Mitre link : CVE-2021-32559

CVE.ORG link : CVE-2021-32559

JSON object : View

Products Affected

pywin32_project

  • pywin32
CWE
CWE-190

Integer Overflow or Wraparound