PatchTheCVEatt vulnerabilities
Recent CVEs affecting att products. 14 tracked.
att has 14 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-04-14. Highest priority: CVE-2021-21829 (score 66/100).
- CVE-2022-26507 CRITICAL 9.8 DOWNGRADE UPGRADE A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7
- CVE-2021-21830 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT
- CVE-2021-21829 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::Uncompress
- CVE-2021-21828 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT
- CVE-2021-21827 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT
- CVE-2021-21826 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT
- CVE-2021-21825 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressIt
- CVE-2021-21815 HIGH 7.8 DOWNGRADE A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of
- CVE-2021-21814 HIGH 7.8 DOWNGRADE Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from
- CVE-2021-21813 HIGH 7.8 DOWNGRADE Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from
- CVE-2021-21812 HIGH 7.8 DOWNGRADE A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of
- CVE-2021-21811 CRITICAL 9.8 DOWNGRADE A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xm
- CVE-2021-21810 CRITICAL 9.8 DOWNGRADE A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7
- CVE-2020-22650 HIGH 7.5 DOWNGRADE A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a s
FAQ
How do I fix att vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is att being exploited right now?
None of the tracked att CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which att CVE should I patch first?
CVE-2021-21829 currently ranks highest (66/100): A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::Uncompress.