ByteOS Network

NVD Vulnerability Details :

CVE-2021-35331

Modified

Source-cve@mitre.org

Published At-05 Jul, 2021 | 15:15

Updated At-04 Aug, 2024 | 01:15

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

TCL

>>tcl>>8.6.11

cpe:2.3:a:tcl:tcl:8.6.11:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-134	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://core.tcl-lang.org/tcl/info/28ef6c0c741408a2	cve@mitre.org	Exploit Patch Vendor Advisory
https://core.tcl-lang.org/tcl/info/bad6cc213dfe8280	cve@mitre.org	Exploit Vendor Advisory
https://github.com/tcltk/tcl/commit/4705dbdde2f32ff90420765cd93e7ac71d81a222	cve@mitre.org	Patch Third Party Advisory
https://sqlite.org/forum/info/7dcd751996c93ec9	cve@mitre.org	Exploit Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History