CVE-2021-42574: fedoraproject fedora Code Injection

CVSS: 8.3v3.1HighModified

AliasesALPINE-CVE-2021-42574MGASA-2021-0517RHSA-2021:4033+34 more

Published 01-11-2021Last modified 04-08-2024

Vulnerability summary

CVE-2021-42574 is a high (CVSS 8.3) Code Injection vulnerability in fedoraproject fedora. EPSS estimates a 12.88% chance of exploitation in the next 30 days, higher than 96.2% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk

46/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.3/10

010

High · v3.1 (NVD)

EPSS score

12.88%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits4reference

Timeline

01-11-2021
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such that the ordering of tokens perceived by human reviewers does not match what will be processed by a compiler/interpreter/etc. The Unicode Consortium has documented this class of vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm.

CVSS metrics

6 scores · 5 sources · 2 versions

v3.18.3v2.05.1

EPSS trend

Probability

12.88%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 12.88% on 18-09-2026

18-09-202618-10-2026

EPSS score

12.88%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (trojansource.codes)
Maturity: unknown
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown

Show all 4 exploits

referenceUnverified
Exploit Reference (scyon.nl)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-94Improper Control of Generation of Code ('Code Injection')The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected systems

Redhat194 products

annobin< 0:9.72-1.el8_5.2 | < 0:9.50-1.el8_4.1 | < 0:8.78-1.el8_1.1 | < 0:8.90-1.el8_2.1
annobin-annocheck< 0:9.72-1.el8_5.2 | < 0:9.50-1.el8_4.1
annobin-annocheck-debuginfo< 0:9.72-1.el8_5.2 | < 0:9.50-1.el8_4.1
annobin-debuginfo< 0:9.72-1.el8_5.2 | < 0:9.50-1.el8_4.1 | < 0:8.78-1.el8_1.1 | < 0:8.90-1.el8_2.1
annobin-debugsource< 0:9.72-1.el8_5.2 | < 0:9.50-1.el8_4.1 | < 0:8.78-1.el8_1.1 | < 0:8.90-1.el8_2.1

binutils< 0:2.27-44.base.el7_9.1 | < 0:2.27-41.base.el7_7.4 | < 0:2.27-34.base.el7_6.4 | < 0:2.25.1-32.base.el7_4.5 | < 0:2.25.1-22.base.el7_3.3 | < 0:2.23.52.0.1-55.el7_2.4 | < 0:2.30-108.el8_5.1 | < 0:2.30-93.el8_4.2 | < 0:2.30-73.el8_2.1 | < 0:2.30-58.el8_1.3
binutils-debuginfo< 0:2.27-44.base.el7_9.1 | < 0:2.27-41.base.el7_7.4 | < 0:2.27-34.base.el7_6.4 | < 0:2.25.1-32.base.el7_4.5 | < 0:2.25.1-22.base.el7_3.3 | < 0:2.23.52.0.1-55.el7_2.4 | < 0:2.30-108.el8_5.1 | < 0:2.30-93.el8_4.2 | < 0:2.30-73.el8_2.1 | < 0:2.30-58.el8_1.3
binutils-debugsource< 0:2.30-108.el8_5.1 | < 0:2.30-93.el8_4.2 | < 0:2.30-73.el8_2.1 | < 0:2.30-58.el8_1.3
binutils-devel< 0:2.27-44.base.el7_9.1 | < 0:2.27-41.base.el7_7.4 | < 0:2.27-34.base.el7_6.4 | < 0:2.25.1-32.base.el7_4.5 | < 0:2.25.1-22.base.el7_3.3 | < 0:2.23.52.0.1-55.el7_2.4 | < 0:2.30-108.el8_5.1 | < 0:2.30-93.el8_4.2 | < 0:2.30-73.el8_2.1 | < 0:2.30-58.el8_1.3
cargo< 0:1.54.0-3.module+el8.5.0+13074+d655d86c
cargo-debuginfo< 0:1.54.0-3.module+el8.5.0+13074+d655d86c
cargo-doc< 0:1.54.0-3.module+el8.5.0+13074+d655d86c
clang< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-analyzer< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-debuginfo< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-debugsource< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-devel< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-libs< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-libs-debuginfo< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-resource-filesystem< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-tools-extra< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clang-tools-extra-debuginfo< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
clippy< 0:1.54.0-3.module+el8.5.0+13074+d655d86c
clippy-debuginfo< 0:1.54.0-3.module+el8.5.0+13074+d655d86c
compiler-rt< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
compiler-rt-debuginfo< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
compiler-rt-debugsource< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
cpp< 0:8.5.0-4.el8_5
cpp-debuginfo< 0:8.5.0-4.el8_5
devtoolset-10-annobin< 0:9.23-4.el7.1
devtoolset-10-annobin-annocheck< 0:9.23-4.el7.1
devtoolset-10-annobin-debuginfo< 0:9.23-4.el7.1
devtoolset-10-binutils< 0:2.35-5.el7.3
devtoolset-10-binutils-debuginfo< 0:2.35-5.el7.3
devtoolset-10-binutils-devel< 0:2.35-5.el7.3
devtoolset-10-gcc< 0:10.2.1-11.2.el7
devtoolset-10-gcc-c++< 0:10.2.1-11.2.el7
devtoolset-10-gcc-debuginfo< 0:10.2.1-11.2.el7
devtoolset-10-gcc-gdb-plugin< 0:10.2.1-11.2.el7
devtoolset-10-gcc-gfortran< 0:10.2.1-11.2.el7
devtoolset-10-gcc-plugin-devel< 0:10.2.1-11.2.el7
devtoolset-10-libasan-devel< 0:10.2.1-11.2.el7
devtoolset-10-libatomic-devel< 0:10.2.1-11.2.el7
devtoolset-10-libgccjit< 0:10.2.1-11.2.el7
devtoolset-10-libgccjit-devel< 0:10.2.1-11.2.el7
devtoolset-10-libgccjit-docs< 0:10.2.1-11.2.el7
devtoolset-10-libitm-devel< 0:10.2.1-11.2.el7
devtoolset-10-liblsan-devel< 0:10.2.1-11.2.el7
devtoolset-10-libquadmath-devel< 0:10.2.1-11.2.el7
devtoolset-10-libstdc++-devel< 0:10.2.1-11.2.el7
devtoolset-10-libstdc++-docs< 0:10.2.1-11.2.el7
devtoolset-10-libtsan-devel< 0:10.2.1-11.2.el7
devtoolset-10-libubsan-devel< 0:10.2.1-11.2.el7
devtoolset-11-annobin< 0:9.82-1.el7.1
devtoolset-11-annobin-annocheck< 0:9.82-1.el7.1
devtoolset-11-annobin-debuginfo< 0:9.82-1.el7.1
devtoolset-11-annobin-docs< 0:9.82-1.el7.1
devtoolset-11-annobin-plugin-gcc< 0:9.82-1.el7.1
devtoolset-11-binutils< 0:2.36.1-1.el7.1
devtoolset-11-binutils-debuginfo< 0:2.36.1-1.el7.1
devtoolset-11-binutils-devel< 0:2.36.1-1.el7.1
devtoolset-11-gcc< 0:11.2.1-1.2.el7
devtoolset-11-gcc-c++< 0:11.2.1-1.2.el7
devtoolset-11-gcc-debuginfo< 0:11.2.1-1.2.el7
devtoolset-11-gcc-gdb-plugin< 0:11.2.1-1.2.el7
devtoolset-11-gcc-gfortran< 0:11.2.1-1.2.el7
devtoolset-11-gcc-plugin-devel< 0:11.2.1-1.2.el7
devtoolset-11-libasan-devel< 0:11.2.1-1.2.el7
devtoolset-11-libatomic-devel< 0:11.2.1-1.2.el7
devtoolset-11-libgccjit< 0:11.2.1-1.2.el7
devtoolset-11-libgccjit-devel< 0:11.2.1-1.2.el7
devtoolset-11-libgccjit-docs< 0:11.2.1-1.2.el7
devtoolset-11-libitm-devel< 0:11.2.1-1.2.el7
devtoolset-11-liblsan-devel< 0:11.2.1-1.2.el7
devtoolset-11-libquadmath-devel< 0:11.2.1-1.2.el7
devtoolset-11-libstdc++-devel< 0:11.2.1-1.2.el7
devtoolset-11-libstdc++-docs< 0:11.2.1-1.2.el7
devtoolset-11-libtsan-devel< 0:11.2.1-1.2.el7
devtoolset-11-libubsan-devel< 0:11.2.1-1.2.el7
gcc< 0:8.5.0-4.el8_5
gcc-c++< 0:8.5.0-4.el8_5
gcc-c++-debuginfo< 0:8.5.0-4.el8_5
gcc-debuginfo< 0:8.5.0-4.el8_5
gcc-debugsource< 0:8.5.0-4.el8_5
gcc-gdb-plugin< 0:8.5.0-4.el8_5
gcc-gdb-plugin-debuginfo< 0:8.5.0-4.el8_5
gcc-gfortran< 0:8.5.0-4.el8_5
gcc-gfortran-debuginfo< 0:8.5.0-4.el8_5
gcc-offload-nvptx< 0:8.5.0-4.el8_5
gcc-offload-nvptx-debuginfo< 0:8.5.0-4.el8_5
gcc-plugin-devel< 0:8.5.0-4.el8_5
gcc-plugin-devel-debuginfo< 0:8.5.0-4.el8_5
gcc-toolset-10-annobin< 0:9.29-1.el8_4.1 | < 0:9.29-1.el8_5.2
gcc-toolset-10-annobin-annocheck-debuginfo< 0:9.29-1.el8_4.1 | < 0:9.29-1.el8_5.2
gcc-toolset-10-annobin-debuginfo< 0:9.29-1.el8_4.1 | < 0:9.29-1.el8_5.2
gcc-toolset-10-binutils< 0:2.35-8.el8_4.5 | < 0:2.35-8.el8_5.6
gcc-toolset-10-binutils-debuginfo< 0:2.35-8.el8_4.5 | < 0:2.35-8.el8_5.6
gcc-toolset-10-binutils-devel< 0:2.35-8.el8_4.5 | < 0:2.35-8.el8_5.6
gcc-toolset-10-gcc< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-c++< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-c++-debuginfo< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-debuginfo< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-gdb-plugin< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-gdb-plugin-debuginfo< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-gfortran< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-gfortran-debuginfo< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-plugin-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-gcc-plugin-devel-debuginfo< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libasan-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libatomic-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libgccjit-debuginfo< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libitm-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-liblsan-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libquadmath-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libstdc++-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libstdc++-docs< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libtsan-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-libubsan-devel< 0:10.3.1-1.2.el8_5
gcc-toolset-10-offload-nvptx-debuginfo< 0:10.3.1-1.2.el8_5
gcc-toolset-11-annobin< 0:9.85-1.el8_5.1
gcc-toolset-11-annobin-annocheck< 0:9.85-1.el8_5.1
gcc-toolset-11-annobin-annocheck-debuginfo< 0:9.85-1.el8_5.1
gcc-toolset-11-annobin-debuginfo< 0:9.85-1.el8_5.1
gcc-toolset-11-annobin-docs< 0:9.85-1.el8_5.1
gcc-toolset-11-annobin-plugin-gcc< 0:9.85-1.el8_5.1
gcc-toolset-11-annobin-plugin-gcc-debuginfo< 0:9.85-1.el8_5.1
gcc-toolset-11-binutils< 0:2.36.1-1.el8_5.1
gcc-toolset-11-binutils-debuginfo< 0:2.36.1-1.el8_5.1
gcc-toolset-11-binutils-devel< 0:2.36.1-1.el8_5.1
gcc-toolset-11-gcc< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-c++< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-c++-debuginfo< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-debuginfo< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-gdb-plugin< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-gdb-plugin-debuginfo< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-gfortran< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-gfortran-debuginfo< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-plugin-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-gcc-plugin-devel-debuginfo< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libasan-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libatomic-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libgccjit< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libgccjit-debuginfo< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libgccjit-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libgccjit-docs< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libitm-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-liblsan-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libquadmath-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libstdc++-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libstdc++-docs< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libtsan-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-libubsan-devel< 0:11.2.1-1.2.el8_5
gcc-toolset-11-offload-nvptx-debuginfo< 0:11.2.1-1.2.el8_5
git-clang-format< 0:12.0.1-4.module+el8.5.0+13246+cefb5d4c
libasan< 0:8.5.0-4.el8_5
libasan-debuginfo< 0:8.5.0-4.el8_5
libasan6< 0:10.2.1-11.2.el7 | < 0:10.3.1-1.2.el8_5 | < 0:11.2.1-1.2.el8_5 | < 0:11.2.1-1.2.el7
libasan6-debuginfo< 0:10.3.1-1.2.el8_5 | < 0:11.2.1-1.2.el8_5
libatomic< 0:8.5.0-4.el8_5
libatomic-debuginfo< 0:8.5.0-4.el8_5
libatomic-static< 0:8.5.0-4.el8_5
libgcc< 0:8.5.0-4.el8_5
libgcc-debuginfo< 0:8.5.0-4.el8_5
libgfortran< 0:8.5.0-4.el8_5
libgfortran-debuginfo< 0:8.5.0-4.el8_5
libgomp< 0:8.5.0-4.el8_5
libgomp-debuginfo< 0:8.5.0-4.el8_5
libgomp-offload-nvptx< 0:8.5.0-4.el8_5
libgomp-offload-nvptx-debuginfo< 0:8.5.0-4.el8_5
libitm< 0:8.5.0-4.el8_5
libitm-debuginfo< 0:8.5.0-4.el8_5
libitm-devel< 0:8.5.0-4.el8_5
liblsan< 0:10.2.1-11.2.el7 | < 0:8.5.0-4.el8_5 | < 0:11.2.1-1.2.el7
liblsan-debuginfo< 0:8.5.0-4.el8_5
libomp< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
libomp-debuginfo< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
libomp-debugsource< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
libomp-devel< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
libomp-test< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
libomp-test-debuginfo< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5
libquadmath< 0:8.5.0-4.el8_5
libquadmath-debuginfo< 0:8.5.0-4.el8_5
libquadmath-devel< 0:8.5.0-4.el8_5
libstdc++< 0:8.5.0-4.el8_5
libstdc++-debuginfo< 0:8.5.0-4.el8_5
libstdc++-devel< 0:8.5.0-4.el8_5
libstdc++-docs< 0:8.5.0-4.el8_5
libstdc++-static< 0:8.5.0-4.el8_5
libtsan< 0:10.2.1-11.2.el7 | < 0:8.5.0-4.el8_5 | < 0:11.2.1-1.2.el7
libtsan-debuginfo< 0:8.5.0-4.el8_5
libubsan< 0:8.5.0-4.el8_5
libubsan-debuginfo< 0:8.5.0-4.el8_5
libubsan1< 0:10.2.1-11.2.el7 | < 0:11.2.1-1.2.el7
lld< 0:12.0.1-1.module+el8.5.0+11871+08d0eab5

Show all 194

Alpine1 product

rust< 1.56.1-r0

Debian1 product

rustc< 1.57.0+dfsg1-1

Fedoraproject1 product

fedoraEOL33 | 34 | 35

Mageia1 product

rust< 1.56.1-1.mga8

Opensuse1 product

rust1.56&distro=openSUSE Tumbleweed< 1.56.1-1.1

Ubuntu1 product

rustc< 1.57.0+dfsg1+llvm-0ubuntu1~20.04.1 | < 1.57.0+dfsg1+llvm-0ubuntu2

7 vendors · 200 products · Showing 200 of 260. Use Open JSON for the complete list.

References

106 links

www.unicode.org/versions/Unicode14.0.0/REPORTRelease NotesVendor Advisory
trojansource.codesREPORTExploitTechnical DescriptionThird Party Advisory
www.openwall.com/lists/oss-security/2021/11/01/1Mailing ListExploitMitigationThird Party Advisory
www.openwall.com/lists/oss-security/2021/11/01/4Mailing ListExploitThird Party Advisory
www.openwall.com/lists/oss-security/2021/11/01/6Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2021/11/01/5Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2021/11/02/10Mailing List
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
www.kb.cert.org/vuls/id/999008Third Party AdvisoryUS Government Resource

Show all 100 references

lists.fedoraproject.org/archives/…Vendor Advisory
www.scyon.nl/post/trojans-in-your-source-codeExploitMitigationThird Party Advisory
www.unicode.org/reports/tr36/Technical DescriptionVendor Advisory
www.unicode.org/reports/tr39/ARTICLETechnical DescriptionVendor Advisory
www.unicode.org/reports/tr31/Technical DescriptionVendor Advisory
www.unicode.org/reports/tr9/tr9-44.htmlTechnical DescriptionVendor Advisory
www.starwindsoftware.com/security/sw-20220804-0002/Third Party Advisory
security.gentoo.org/glsa/202210-09Vendor AdvisoryThird Party Advisory
security.alpinelinux.org/vuln/CVE-2021-42574Advisory
advisories.mageia.org/MGASA-2021-0517.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=29616REPORT
www.openwall.com/lists/oss-security/2021/11/01/1WEBREPORT
blog.rust-lang.org/2021/05/06/Rust-1.52.0.htmlWEB
blog.rust-lang.org/2021/06/17/Rust-1.53.0.htmlWEB
blog.rust-lang.org/2021/07/29/Rust-1.54.0.htmlWEB
blog.rust-lang.org/2021/09/09/Rust-1.55.0.htmlWEB
blog.rust-lang.org/2021/10/21/Rust-1.56.0.htmlWEB
blog.rust-lang.org/2021/11/01/Rust-1.56.1.htmlWEB
access.redhat.com/errata/RHSA-2021:4033Advisory
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/security/vulnerabilities/RHSB-2021-007ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2005819REPORT
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4033.jsonAdvisory
access.redhat.com/security/cve/CVE-2021-42574REPORT
www.cve.org/CVERecord?id=CVE-2021-42574AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2021-42574Advisory
trojansource.codesARTICLE
www.lightbluetouchpaper.org/2021/11/01/trojan-source-invisible-vulnerabilities/ARTICLE
www.unicode.org/reports/tr36/ARTICLE
access.redhat.com/errata/RHSA-2021:4034Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4034.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4035Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4035.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4036Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4036.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4037Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4037.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4038Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4038.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4039Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4039.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4585Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4585.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4586Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4586.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4587Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4587.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4588Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4588.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4589Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4589.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4590Advisory
blog.rust-lang.org/2021/11/01/cve-2021-42574.htmlARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4590.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4591Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4591.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4592Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4592.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4593Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4593.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4594Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4594.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4595Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4595.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4596Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4596.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4598Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4598.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4599Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4599.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4600Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4600.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4601Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4601.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4602Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4602.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4649Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4649.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4669Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4669.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4694Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4694.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4723Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4723.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4724Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4724.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4729Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4729.jsonAdvisory
access.redhat.com/errata/RHSA-2021:4730Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4730.jsonAdvisory

Showing 100 of 106. Use Open JSON for the complete list.

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities