Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-32559

Good to know:

icon

Date: July 6, 2021

An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.

Language: Python

Severity Score

Related Resources (9)

https://nvd.nist.gov/vuln/detail/CVE-2021-32559
https://github.com/advisories/GHSA-hwfp-hg2m-9vr2
https://github.com/mhammond/pywin32/pull/1701
https://github.com/pypa/advisory-database/tree/main/vulns/pywin32/PYSEC-2021-112.yaml
https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0017/FEYE-2021-0017.md
https://github.com/mhammond/pywin32
https://github.com/mhammond/pywin32/releases
https://github.com/mhammond/pywin32/issues/1700
https://www.mend.io/vulnerability-database/CVE-2021-32559

Severity Score

Weakness Type (CWE)

Integer Overflow or Wraparound

CWE-190

Top Fix

icon

Upgrade Version

Upgrade to version pywin32 -301

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us