Vulnerabilities > CVE-2021-29507 - Unspecified vulnerability in Genivi Diagnostic LOG and Trace

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

genivi

NVD

Published: 2021-05-28

Updated: 2022-08-02

Summary

GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail to generate their dlt logs in system. As of time of publication, no patch exists. As a workaround, one may check the integrity of information in configuration file manually.

Vulnerable Configurations

Part	Description	Count
Application	Genivi Genivi Diagnostic LOG AND Trace 2.10.0 Genivi Diagnostic LOG AND Trace 2.11.0 Genivi Diagnostic LOG AND Trace 2.11.1 Genivi Diagnostic LOG AND Trace 2.12.0 Genivi Diagnostic LOG AND Trace 2.12.1 Genivi Diagnostic LOG AND Trace 2.13.0 Genivi Diagnostic LOG AND Trace 2.14.0 Genivi Diagnostic LOG AND Trace 2.14.1 Genivi Diagnostic LOG AND Trace 2.15.0 Genivi Diagnostic LOG AND Trace 2.16.0 Genivi Diagnostic LOG AND Trace 2.17.0 Genivi Diagnostic LOG AND Trace 2.18.0 Genivi Diagnostic LOG AND Trace 2.18.1 Genivi Diagnostic LOG AND Trace 2.18.2 Genivi Diagnostic LOG AND Trace 2.18.3 Genivi Diagnostic LOG AND Trace 2.18.4 Genivi Diagnostic LOG AND Trace 2.18.5 Genivi Diagnostic LOG AND Trace 2.18.6	19

References

https://github.com/GENIVI/dlt-daemon/security/advisories/GHSA-7cqp-2hqj-mh3f