synaptics fingerprint_driver 输入验证不恰当
CVE编号
CVE-2021-3675利用情况
暂无补丁情况
N/A披露时间
2022-06-17漏洞描述
Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64.解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 5.1.000.26 | Up to (excluding) 5.1.340.26 | ||||
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 5.2.0000.26 | Up to (excluding) 5.2.3541.26 | ||||
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 5.2.200.26 | Up to (excluding) 5.2.229.26 | ||||
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 5.2.300.26 | Up to (excluding) 5.2.325.26 | ||||
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 5.3.0000.26 | Up to (excluding) 5.3.3543.26 | ||||
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 5.5.00.1058 | Up to (excluding) 5.5.44.1058 | ||||
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 5.5.00.1102 | Up to (excluding) 5.5.34.1102 | ||||
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 5.5.00.1116 | Up to (excluding) 5.5.14.1116 | ||||
| 运行在以下环境 | |||||||||
| 应用 | synaptics | fingerprint_driver | * | From (including) 6.0.00.1111 | Up to (excluding) 6.0.58.1111 | ||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | pdns-backend-lua2 | * | Up to (excluding) 4.5.1-1.el8 | |||||
- 攻击路径 本地
- 攻击复杂度 低
- 权限要求 低
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 无
| CWE-ID | 漏洞类型 |
| CWE-20 | 输入验证不恰当 |
| CWE-787 | 跨界内存写 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论