CVE-2021-41556
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-41556
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. If a victim executes an attacker-controlled squirrel script, it is possible for the attacker to break out of the squirrel script sandbox even if all dangerous functionality such as File System functions has been disabled. An attacker might abuse this bug to target (for example) Cloud services that allow customization via SquirrelScripts, or distribute malware through video games that embed a Squirrel Engine.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SQUIRREL 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SQUIRREL是编程语言SQUIRREL 3.2稳定版。 SQUIRREL 2.2.5及之前版本和3.1及之前的3.x版本存在缓冲区错误漏洞，该漏洞源于sqclass.cpp允许越界读取（在核心解释器中），可导致代码执行，如果受害者执行攻击者控制的squirrel脚本，即使文件系统功能等所有危险功能已被禁用，攻击者仍有可能突破squirrel脚本沙盒，攻击者可能会滥用这个漏洞针对（例如）允许通过SquirrelScripts进行自定义的云服务或通过嵌入Squirrel引擎的视频游戏分发恶意软件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2021-41556
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-41556
请登录查看更多情报信息。
- https://blog.sonarsource.com/squirrel-vm-sandbox-escape/x_refsource_MISC
- http://www.squirrel-lang.org/#downloadx_refsource_MISC
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M3FQILX7UUEERSDPMZP3MKGTMY2E7ESU/vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BV7SJJ44AGAX4ILIVPREIXPJ2GOG3FKV/vendor-advisoryx_refsource_FEDORA
- https://nvd.nist.gov/vuln/detail/CVE-2021-41556
Same Patch Batch · n/a · 2022-07-28 · 46 CVEs total
| CVE-2022-36992 | 9.9 CRITICAL | Veritas NetBackup 安全漏洞 |
| CVE-2022-36990 | 9.6 CRITICAL | Veritas NetBackup 安全漏洞 |
| CVE-2022-36989 | 8.8 HIGH | Veritas NetBackup 安全漏洞 |
| CVE-2022-36993 | 8.8 HIGH | Veritas NetBackup 安全漏洞 |
| CVE-2022-36986 | 8.6 HIGH | Veritas NetBackup 安全漏洞 |
| CVE-2022-36987 | 8.5 HIGH | Veritas NetBackup 安全漏洞 |
| CVE-2022-36991 | 8.1 HIGH | Veritas NetBackup 安全漏洞 |
| CVE-2022-36988 | 8.0 HIGH | Veritas NetBackup 安全漏洞 |
| CVE-2022-36985 | 7.8 HIGH | Veritas NetBackup 安全漏洞 |
| CVE-2022-36984 | 7.7 HIGH | Veritas NetBackup 安全漏洞 |
| CVE-2022-36997 | 7.1 HIGH | Veritas NetBackup 代码问题漏洞 |
| CVE-2022-37000 | 6.5 MEDIUM | Veritas NetBackup 安全漏洞 |
| CVE-2022-36999 | 6.5 MEDIUM | Veritas NetBackup 安全漏洞 |
| CVE-2022-36994 | 6.3 MEDIUM | Veritas NetBackup 安全漏洞 |
| CVE-2022-36998 | 6.3 MEDIUM | Veritas NetBackup 缓冲区错误漏洞 |
| CVE-2022-36995 | 4.3 MEDIUM | Veritas NetBackup 安全漏洞 |
| CVE-2022-36996 | 4.3 MEDIUM | Veritas NetBackup 安全漏洞 |
| CVE-2022-30287 | Horde Groupware Webmail 跨站请求伪造漏洞 | |
| CVE-2022-34593 | DPTech VPN 安全漏洞 | |
| CVE-2022-34580 | Advanced School Management System 跨站脚本漏洞 |
Showing top 20 of 46 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2021-41556
No comments yet