{"metadata": {"vulnerability": "CVE-2021-42327", "count": 73, "kinds": {"milestone": 20, "sighting": 11, "kev": 0, "other": 42}}, "data": [{"timestamp": "2021-10-02T00:00:00Z", "date_only": false, "value": "2021-10-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-12T00:00:00Z", "date_only": false, "value": "2021-10-12T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-42327", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-10-21T00:00:00Z", "date_only": false, "value": "2021-10-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-42327", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-21T17:15:00Z", "date_only": false, "value": "2021-10-21T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H79R-2WV4-R9G8", "record": "GHSA-H79R-2WV4-R9G8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-10-21T17:15:00Z", "date_only": false, "value": "2021-10-21T17:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-42327", "record": "BELL-CVE-2021-42327", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-21T17:15:00Z", "date_only": false, "value": "2021-10-21T17:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-42327", "record": "UBUNTU-CVE-2021-42327", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-21T17:15:07.913Z", "date_only": false, "value": "2021-10-21T17:15:07.913", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-42327", "record": "FKIE_CVE-2021-42327", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-21T17:15:07.913Z", "date_only": false, "value": "2021-10-21T17:15:07.913", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-42327", "record": "GSD-2021-42327", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-10-21T20:37:09Z", "date_only": false, "value": "2021-10-21T20:37:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/30963", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "c2b960fe-658a-40d6-96cf-c2de8d75a00a", "content": "\u203c CVE-2021-42327 \u203c\n\ndp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/30963"}, {"timestamp": "2021-10-24T22:00:00Z", "date_only": false, "value": "2021-10-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-10-24T22:00:00Z", "date_only": false, "value": "2021-10-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-24T22:00:00Z", "date_only": false, "value": "2021-10-24T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2021-11-03T15:01:23Z", "date_only": false, "value": "2021-11-03T15:01:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/n-eJb_bPDdKFJMa22aYLTja9lfApX45ftzuXjh3MC3aMiQ", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "b18e6d24-aca5-46bd-bfc5-291f247e8839", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-16T14:28:42Z", "date_only": false, "value": "2021-11-16T14:28:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/linkersec/129", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "ba0474e1-5663-4836-bef2-c0221601af38", "content": "SLUB overflow CVE-2021-42327\n\nA concise article about exploiting a slab buffer-overflow bug in the AMD GPU driver. By Thelford Williams.\n\nThe author didn't have access to an AMD GPU, so they manually replicated the vulnerable code. The exploit uses msg_msg elastic objects to leak the kernel address, overwrite slab freelist pointer, allocate memory containing modprobe_path, and overwrite it for code execution.", "url": "https://t.me/linkersec/129", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-16T18:00:06Z", "date_only": false, "value": "2021-11-16T18:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/anwar1213xx/1285", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "98b20ddb-9ca6-4e84-a9a2-7a468d62b3ef", "content": "\u062a\u062c\u0627\u0648\u0632 SLUB CVE-2021-42327\n\n\u0645\u0642\u0627\u0644\u0629 \u0645\u0648\u062c\u0632\u0629 \u062d\u0648\u0644 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062e\u0637\u0623 \u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0645\u062e\u0632\u0646 \u0627\u0644\u0645\u0624\u0642\u062a \u0644\u0644\u0628\u0644\u0627\u0637\u0629 \u0641\u064a \u0628\u0631\u0646\u0627\u0645\u062c \u062a\u0634\u063a\u064a\u0644 \u0648\u062d\u062f\u0629 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0631\u0633\u0648\u0645\u0627\u062a AMD. \u0628\u0642\u0644\u0645 \u062b\u064a\u0644\u0641\u0648\u0631\u062f \u0648\u064a\u0644\u064a\u0627\u0645\u0632.\n\n\u0644\u0645 \u064a\u0643\u0646 \u0644\u062f\u0649 \u0627\u0644\u0645\u0624\u0644\u0641 \u062d\u0642 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0648\u062d\u062f\u0629 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0631\u0633\u0648\u0645\u0627\u062a AMD \u060c \u0644\u0630\u0644\u0643 \u0642\u0627\u0645\u0648\u0627 \u064a\u062f\u0648\u064a\u064b\u0627 \u0628\u0646\u0633\u062e \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0639\u064a\u0641. \u064a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0643\u0627\u0626\u0646\u0627\u062a msg_msg \u0627\u0644\u0645\u0631\u0646\u0629 \u0644\u062a\u0633\u0631\u064a\u0628 \u0639\u0646\u0648\u0627\u0646 \u0627\u0644\u0646\u0648\u0627\u0629 \u060c \u0648\u0627\u0644\u0643\u062a\u0627\u0628\u0629 \u0641\u0648\u0642 \u0645\u0624\u0634\u0631 \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u062d\u0631\u0629 \u0644\u0644\u0628\u0644\u0627\u0637\u0629 \u060c \u0648\u062a\u062e\u0635\u064a\u0635 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 modprobe_path \u060c \u0648\u0627\u0644\u0643\u062a\u0627\u0628\u0629 \u0641\u0648\u0642\u0647\u0627 \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629.", "url": "https://t.me/anwar1213xx/1285", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-16T18:00:06Z", "date_only": false, "value": "2021-11-16T18:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Termux_AND_Security7667/327", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "3212b1aa-fe64-4c77-a7df-57f2cb46a7a2", "content": "\u062a\u062c\u0627\u0648\u0632 SLUB CVE-2021-42327\n\n\u0645\u0642\u0627\u0644\u0629 \u0645\u0648\u062c\u0632\u0629 \u062d\u0648\u0644 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062e\u0637\u0623 \u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0645\u062e\u0632\u0646 \u0627\u0644\u0645\u0624\u0642\u062a \u0644\u0644\u0628\u0644\u0627\u0637\u0629 \u0641\u064a \u0628\u0631\u0646\u0627\u0645\u062c \u062a\u0634\u063a\u064a\u0644 \u0648\u062d\u062f\u0629 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0631\u0633\u0648\u0645\u0627\u062a AMD. \u0628\u0642\u0644\u0645 \u062b\u064a\u0644\u0641\u0648\u0631\u062f \u0648\u064a\u0644\u064a\u0627\u0645\u0632.\n\n\u0644\u0645 \u064a\u0643\u0646 \u0644\u062f\u0649 \u0627\u0644\u0645\u0624\u0644\u0641 \u062d\u0642 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0648\u062d\u062f\u0629 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0631\u0633\u0648\u0645\u0627\u062a AMD \u060c \u0644\u0630\u0644\u0643 \u0642\u0627\u0645\u0648\u0627 \u064a\u062f\u0648\u064a\u064b\u0627 \u0628\u0646\u0633\u062e \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0639\u064a\u0641. \u064a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0643\u0627\u0626\u0646\u0627\u062a msg_msg \u0627\u0644\u0645\u0631\u0646\u0629 \u0644\u062a\u0633\u0631\u064a\u0628 \u0639\u0646\u0648\u0627\u0646 \u0627\u0644\u0646\u0648\u0627\u0629 \u060c \u0648\u0627\u0644\u0643\u062a\u0627\u0628\u0629 \u0641\u0648\u0642 \u0645\u0624\u0634\u0631 \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u062d\u0631\u0629 \u0644\u0644\u0628\u0644\u0627\u0637\u0629 \u060c \u0648\u062a\u062e\u0635\u064a\u0635 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 modprobe_path \u060c \u0648\u0627\u0644\u0643\u062a\u0627\u0628\u0629 \u0641\u0648\u0642\u0647\u0627 \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629.", "url": "https://t.me/Termux_AND_Security7667/327", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-16T18:00:09Z", "date_only": false, "value": "2021-11-16T18:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hack77z99/9007", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "08d832c2-9c34-40a4-8ff4-5509c141da4d", "content": "\u062a\u062c\u0627\u0648\u0632 SLUB CVE-2021-42327\n\n\u0645\u0642\u0627\u0644\u0629 \u0645\u0648\u062c\u0632\u0629 \u062d\u0648\u0644 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062e\u0637\u0623 \u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0645\u062e\u0632\u0646 \u0627\u0644\u0645\u0624\u0642\u062a \u0644\u0644\u0628\u0644\u0627\u0637\u0629 \u0641\u064a \u0628\u0631\u0646\u0627\u0645\u062c \u062a\u0634\u063a\u064a\u0644 \u0648\u062d\u062f\u0629 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0631\u0633\u0648\u0645\u0627\u062a AMD. \u0628\u0642\u0644\u0645 \u062b\u064a\u0644\u0641\u0648\u0631\u062f \u0648\u064a\u0644\u064a\u0627\u0645\u0632.\n\n\u0644\u0645 \u064a\u0643\u0646 \u0644\u062f\u0649 \u0627\u0644\u0645\u0624\u0644\u0641 \u062d\u0642 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0648\u062d\u062f\u0629 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0631\u0633\u0648\u0645\u0627\u062a AMD \u060c \u0644\u0630\u0644\u0643 \u0642\u0627\u0645\u0648\u0627 \u064a\u062f\u0648\u064a\u064b\u0627 \u0628\u0646\u0633\u062e \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0639\u064a\u0641. \u064a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0643\u0627\u0626\u0646\u0627\u062a msg_msg \u0627\u0644\u0645\u0631\u0646\u0629 \u0644\u062a\u0633\u0631\u064a\u0628 \u0639\u0646\u0648\u0627\u0646 \u0627\u0644\u0646\u0648\u0627\u0629 \u060c \u0648\u0627\u0644\u0643\u062a\u0627\u0628\u0629 \u0641\u0648\u0642 \u0645\u0624\u0634\u0631 \u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u062d\u0631\u0629 \u0644\u0644\u0628\u0644\u0627\u0637\u0629 \u060c \u0648\u062a\u062e\u0635\u064a\u0635 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u062a\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 modprobe_path \u060c \u0648\u0627\u0644\u0643\u062a\u0627\u0628\u0629 \u0641\u0648\u0642\u0647\u0627 \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629.", "url": "https://t.me/hack77z99/9007", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-21T06:33:42Z", "date_only": false, "value": "2021-11-21T06:33:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/8147", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "771c4210-c343-482c-9ed4-a8cae844090c", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 SLUB overflow CVE-2021-42327\n\nhttps://docfate111.github.io/blog/securityresearch/2021/11/08/SLUBoverflow.html", "url": "https://t.me/cKure/8147", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-30T23:00:00Z", "date_only": false, "value": "2021-11-30T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2021-12-01T00:00:00Z", "date_only": false, "value": "2021-12-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-914", "record": "CERTFR-2021-AVI-914", "field": "revisions.0.revision_date"}, {"timestamp": "2021-12-16T00:00:00Z", "date_only": false, "value": "2021-12-16T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2021-12-16T00:00:00Z", "date_only": false, "value": "2021-12-16T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-02-02T23:00:00Z", "date_only": false, "value": "2022-02-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-02-04T00:00:00Z", "date_only": false, "value": "2022-02-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-109", "record": "CERTFR-2022-AVI-109", "field": "revisions.0.revision_date"}, {"timestamp": "2022-03-31T22:00:00Z", "date_only": false, "value": "2022-03-31T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-04-01T00:00:00Z", "date_only": false, "value": "2022-04-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-299", "record": "CERTFR-2022-AVI-299", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-24T19:18:27Z", "date_only": false, "value": "2022-05-24T19:18:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H79R-2WV4-R9G8", "record": "GHSA-H79R-2WV4-R9G8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-12-13T01:23:06.575Z", "date_only": false, "value": "2023-12-13T01:23:06.575295Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-42327", "record": "GSD-2021-42327", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-25T00:39:39.457Z", "date_only": false, "value": "2024-03-25T00:39:39.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-42327", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-03-25T01:15:51.437Z", "date_only": false, "value": "2024-03-25T01:15:51.437", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-42327", "record": "GSD-2021-42327", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-03-25T03:31:43Z", "date_only": false, "value": "2024-03-25T03:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H79R-2WV4-R9G8", "record": "GHSA-H79R-2WV4-R9G8", "field": "modified"}, {"timestamp": "2024-06-11T00:00:00Z", "date_only": true, "value": "2024-06-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0496", "record": "CERTFR-2024-AVI-0496", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-06-12T00:00:00Z", "date_only": true, "value": "2024-06-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0496", "record": "CERTFR-2024-AVI-0496", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2024-06-12T11:33:43Z", "date_only": false, "value": "2024-06-12T11:33:43Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2024:2008-1", "record": "SUSE-SU-2024:2008-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-12T11:33:43Z", "date_only": false, "value": "2024-06-12T11:33:43Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2024:2008-1", "record": "SUSE-SU-2024:2008-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-12T11:33:43Z", "date_only": false, "value": "2024-06-12T11:33:43Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2024:2008-1", "record": "SUSE-SU-2024:2008-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-12T11:33:43Z", "date_only": false, "value": "2024-06-12T11:33:43Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2024:2008-1", "record": "SUSE-SU-2024:2008-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-12T22:00:00Z", "date_only": false, "value": "2024-06-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-06-13T00:00:00Z", "date_only": true, "value": "2024-06-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0496", "record": "CERTFR-2024-AVI-0496", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2024-06-14T00:00:00Z", "date_only": false, "value": "2024-06-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0496", "record": "CERTFR-2024-AVI-0496", "field": "revisions.0.revision_date"}, {"timestamp": "2024-07-18T11:41:09.871Z", "date_only": false, "value": "2024-07-18T11:41:09.87198Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-42327", "record": "BELL-CVE-2021-42327", "field": "modified"}, {"timestamp": "2024-07-18T11:41:09.871Z", "date_only": false, "value": "2024-07-18T11:41:09.87198Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2021-42327", "record": "BELL-CVE-2021-42327", "field": "withdrawn"}, {"timestamp": "2024-08-04T03:30:38.271Z", "date_only": false, "value": "2024-08-04T03:30:38.271Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-42327", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T03:30:38.271Z", "date_only": false, "value": "2024-08-04T03:30:38.271Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-42327", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-24T00:00:00Z", "date_only": true, "value": "2025-01-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0088", "record": "CERTFR-2025-AVI-0088", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2025-01-24T10:10:55Z", "date_only": false, "value": "2025-01-24T10:10:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0231-1", "record": "SUSE-SU-2025:0231-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-24T10:10:55Z", "date_only": false, "value": "2025-01-24T10:10:55Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0231-1", "record": "SUSE-SU-2025:0231-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-24T10:10:55Z", "date_only": false, "value": "2025-01-24T10:10:55Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2025:0231-1", "record": "SUSE-SU-2025:0231-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-01-24T10:10:55Z", "date_only": false, "value": "2025-01-24T10:10:55Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0231-1", "record": "SUSE-SU-2025:0231-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-25T00:00:00Z", "date_only": true, "value": "2025-01-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0088", "record": "CERTFR-2025-AVI-0088", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": true, "value": "2025-01-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0088", "record": "CERTFR-2025-AVI-0088", "field": "vendor_advisories.15.published_at"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": true, "value": "2025-01-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0088", "record": "CERTFR-2025-AVI-0088", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-01-27T09:56:13.867Z", "date_only": false, "value": "2025-01-27T09:56:13.867+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1372", "record": "WID-SEC-W-2024-1372", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": true, "value": "2025-01-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0088", "record": "CERTFR-2025-AVI-0088", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": true, "value": "2025-01-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0088", "record": "CERTFR-2025-AVI-0088", "field": "vendor_advisories.17.published_at"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0088", "record": "CERTFR-2025-AVI-0088", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-19T22:16:00.453Z", "date_only": false, "value": "2025-10-19T22:16:00.453Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-24T04:50:35Z", "date_only": false, "value": "2025-10-24T04:50:35Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-42327", "record": "UBUNTU-CVE-2021-42327", "field": "modified"}, {"timestamp": "2026-06-17T04:09:39.263Z", "date_only": false, "value": "2026-06-17T04:09:39.263", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-42327", "record": "FKIE_CVE-2021-42327", "field": "lastModified"}, {"timestamp": "2026-07-29T12:02:51.379Z", "date_only": false, "value": "2026-07-29T12:02:51.379209Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1825", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "23e5eb2c-375d-4818-8026-2bae8919d24f", "content": "SLUB overflow CVE-2021-42327 https://docfate111.github.io/blog/securityresearch/2021/11/08/SLUBoverflow.html", "url": "https://t.me/reverseame/1825"}, {"timestamp": "2026-08-03T04:12:55.776Z", "date_only": false, "value": "2026-08-03T04:12:55.776302Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1825", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "a992d732-0938-4b1a-ad57-b7f0e99deead", "content": "SLUB overflow CVE-2021-42327 https://docfate111.github.io/blog/securityresearch/2021/11/08/SLUBoverflow.html", "url": "https://t.me/reverseame/1825", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:36.615Z", "date_only": false, "value": "2026-09-01T17:00:36.615788Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4730", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "c3c8fba1-fb64-4386-8282-bb83ef77e7d7", "content": "Threat_Research\n1. CI/CD: Pre-Auth Takeover of Build Pipelines in GoCD\nhttps://blog.sonarsource.com/gocd-pre-auth-pipeline-takeover\n2. Vulnerabilities in FreeSWITCH 1.10.7\nhttps://www.rtcsec.com/article/killing-bugs-one-vulnerability-report-at-a-time\n\nexploit\n1. CVE-2021-22214:\nGitlab CI Lint API SSRF\nhttps://github.com/antx-code/CVE-2021-22214\n\n2. CVE-2021-42327:\nWIP kernel exploit for minor bug in amd gpu driver\nhttps://github.com/docfate111/CVE-2021-42327\n\nRed_Team_Tactics\n1. Stored XSS in Mermaid when viewing Markdown files (GitLab)\nhttps://hackerone.com/reports/1212822\n2. Bypass 4xx HTTP response status codes.\nBased on cURL.\nhttps://github.com/ivan-sincek/forbidden\n\nResearch\nEscalating XSS to Sainthood with Nagios\n(Example End-to-End Attack: NSCA)\nhttps://blog.grimm-co.com/2021/11/escalating-xss-to-sainthood-with-nagios.html\n]-> Scripts:\nhttps://github.com/grimm-co/NotQuite0DayFriday/tree/trunk/2021.11.02-nagios\n\nWLAN_Security\nBrakTooth: Patch Status, Vulnerabilities and SDK/Firmware Version of Affected Devices\nhttps://isc.sans.edu/forums/diary/Revisiting+BrakTooth+Two+Months+Later/27992", "url": "https://t.me/cissp/4730"}, {"timestamp": "2026-09-10T15:00:06.766Z", "date_only": false, "value": "2026-09-10T15:00:06.766423Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4730", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "f6de37ba-f3fd-4cba-8096-3337bcd02e6c", "content": "Threat_Research\n1. CI/CD: Pre-Auth Takeover of Build Pipelines in GoCD\nhttps://blog.sonarsource.com/gocd-pre-auth-pipeline-takeover\n2. Vulnerabilities in FreeSWITCH 1.10.7\nhttps://www.rtcsec.com/article/killing-bugs-one-vulnerability-report-at-a-time\n\nexploit\n1. CVE-2021-22214:\nGitlab CI Lint API SSRF\nhttps://github.com/antx-code/CVE-2021-22214\n\n2. CVE-2021-42327:\nWIP kernel exploit for minor bug in amd gpu driver\nhttps://github.com/docfate111/CVE-2021-42327\n\nRed_Team_Tactics\n1. Stored XSS in Mermaid when viewing Markdown files (GitLab)\nhttps://hackerone.com/reports/1212822\n2. Bypass 4xx HTTP response status codes.\nBased on cURL.\nhttps://github.com/ivan-sincek/forbidden\n\nResearch\nEscalating XSS to Sainthood with Nagios\n(Example End-to-End Attack: NSCA)\nhttps://blog.grimm-co.com/2021/11/escalating-xss-to-sainthood-with-nagios.html\n]-> Scripts:\nhttps://github.com/grimm-co/NotQuite0DayFriday/tree/trunk/2021.11.02-nagios\n\nWLAN_Security\nBrakTooth: Patch Status, Vulnerabilities and SDK/Firmware Version of Affected Devices\nhttps://isc.sans.edu/forums/diary/Revisiting+BrakTooth+Two+Months+Later/27992", "url": "https://t.me/cissp/4730", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-20T15:53:34Z", "date_only": false, "value": "2026-09-20T15:53:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2024:2008-1", "record": "SUSE-SU-2024:2008-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T17:31:08Z", "date_only": false, "value": "2026-09-20T17:31:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0231-1", "record": "SUSE-SU-2025:0231-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-11T11:47:42Z", "date_only": false, "value": "2026-10-11T11:47:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2024:2008-1", "record": "SUSE-SU-2024:2008-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:47:42Z", "date_only": false, "value": "2026-10-11T11:47:42Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2024:2008-1", "record": "SUSE-SU-2024:2008-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-11T11:49:05Z", "date_only": false, "value": "2026-10-11T11:49:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0231-1", "record": "SUSE-SU-2025:0231-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:49:05Z", "date_only": false, "value": "2026-10-11T11:49:05Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0231-1", "record": "SUSE-SU-2025:0231-1", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-29T22:36:29.835Z", "anchors": {"origin": {"timestamp": "2021-10-02T00:00:00Z", "date_only": false, "value": "2021-10-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-10-02T00:00:00Z", "date_only": false, "value": "2021-10-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-11-03T15:01:23Z", "date_only": false, "value": "2021-11-03T15:01:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/n-eJb_bPDdKFJMa22aYLTja9lfApX45ftzuXjh3MC3aMiQ", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "b18e6d24-aca5-46bd-bfc5-291f247e8839", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2818883.0, "hours": 783.0230555555555, "days": 32.62596064814815, "min_seconds": 2732483.0, "max_seconds": 2818883.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-10-02T00:00:00Z", "date_only": false, "value": "2021-10-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-11-03T15:01:23Z", "date_only": false, "value": "2021-11-03T15:01:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/n-eJb_bPDdKFJMa22aYLTja9lfApX45ftzuXjh3MC3aMiQ", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "b18e6d24-aca5-46bd-bfc5-291f247e8839", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 2160000.0, "hours": 600.0, "days": 25.0, "min_seconds": 2073600.0, "max_seconds": 2246400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-10-02T00:00:00Z", "date_only": false, "value": "2021-10-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 2160000.0, "hours": 600.0, "days": 25.0, "min_seconds": 2073600.0, "max_seconds": 2246400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-10-02T00:00:00Z", "date_only": false, "value": "2021-10-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -658883.0, "hours": -183.02305555555554, "days": -7.625960648148149, "min_seconds": -658883.0, "max_seconds": -572483.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2021-11-03T15:01:23Z", "date_only": false, "value": "2021-11-03T15:01:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/n-eJb_bPDdKFJMa22aYLTja9lfApX45ftzuXjh3MC3aMiQ", "record": "CVE-2021-42327", "field": "creation_timestamp", "uuid": "b18e6d24-aca5-46bd-bfc5-291f247e8839", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-42327", "record": "MSRC_CVE-2021-42327", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}