There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.
References
| Link | Resource |
|---|---|
| https://github.com/hughsie/colord/issues/110 | Exploit Issue Tracking Patch Third Party Advisory |
| https://github.com/hughsie/colord/issues/110 | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/hughsie/colord/issues/110 - Exploit, Issue Tracking, Patch, Third Party Advisory |
17 Jul 2023, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-401 |
31 Aug 2022, 16:54
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:colord_project:colord:1.4.5:*:*:*:*:*:*:* cpe:2.3:a:colord_project:colord:1.4.4:*:*:*:*:*:*:* |
|
| References | (MISC) https://github.com/hughsie/colord/issues/110 - Exploit, Issue Tracking, Patch, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-200 |
25 Aug 2022, 18:46
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-25 18:15
Updated : 2024-11-21 06:27
NVD link : CVE-2021-42523
Mitre link : CVE-2021-42523
CVE.ORG link : CVE-2021-42523
JSON object : View
Products Affected
colord_project
- colord