{"id":"CVE-2021-36084","aliases":["ALSA-2021:4513","DEBIAN-CVE-2021-36084","DLA-3930-1","EUVD-2021-22717","GHSA-8p9r-xrm6-68wq","RHSA-2021:4513","RLSA-2021:4513","UBUNTU-CVE-2021-36084","USN-5391-1"],"status":"published","title":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...","description":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00456,"percentile":0.39871,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2021-07-01T02:49:01Z","modified":"2026-10-29T11:01:42Z","fixes":[{"ecosystem":"Debian:12","package":"libsepol","fixed_in":["3.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsepol","fixed_in":["3.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libsepol","fixed_in":["3.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsepol","fixed_in":["2.4-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libsepol","fixed_in":["2.7-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libsepol","fixed_in":["3.0-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsepol-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsepol-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-1+deb11u1"}]}],"versions":["3.1-1"],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsepol-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsepol-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsepol-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsepol-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsepol-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsepol-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-2ubuntu0.1~esm1"}]}],"versions":["2.3-2","2.4-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-1ubuntu0.1"}]}],"versions":["2.7-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-1ubuntu0.1"}]}],"versions":["2.9-2","3.0-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-2ubuntu0.1~esm1"}]}],"versions":["2.3-2","2.4-2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7-1ubuntu0.1"}]}],"versions":["2.7-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsepol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-1ubuntu0.1"}]}],"versions":["2.9-2","3.0-1"],"bundled":4}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"selinux_project","product":"selinux"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-417.yaml","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/SELinuxProject/selinux/commit/f34d3d30c8325e4847a6b696fe7a3936a8a361f3","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250207-0004/","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-202008.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36084","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR"},{"url":"https://security.netapp.com/advisory/ntap-20250207-0004"},{"url":"https://github.com/advisories/GHSA-8p9r-xrm6-68wq"},{"url":"https://errata.almalinux.org/8/ALSA-2021-4513.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-36084","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-36085","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-36086","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-36087","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-36084","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4513","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979668","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4513.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36084","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36084","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36085","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36085","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36085","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36086","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36086","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36087","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36087","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36087","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4513","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-36084","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5391-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-36085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-36086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-36087","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-36084","description":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).","status":"published","published":"2021-07-01T02:49:01Z","modified":"2026-10-14T11:48:54.43Z","updated_at":"2026-11-02T14:33:06.32268Z"}],"euvd":[{"id":"EUVD-2021-22717","description":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).","status":"published","published":"2021-07-01T02:49:01Z","modified":"2026-10-14T11:48:54Z","updated_at":"2026-11-02T17:27:16.356399Z"}],"ghsa":[{"id":"GHSA-8p9r-xrm6-68wq","title":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...","description":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).","status":"published","published":"2022-05-24T19:06:45Z","modified":"2026-10-14T12:32:24Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2021-36084","description":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).","status":"published","published":"2021-07-01T03:15:08.717Z","modified":"2026-10-14T12:17:13.447Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:55.259633Z"}],"osv":[{"id":"CVE-2021-36084","description":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).","status":"published","published":"2021-07-01T03:15:08.717Z","modified":"2026-03-15T14:44:03.859368Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-36084","description":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).","status":"published","published":"2021-07-01T03:15:08.717Z","modified":"2026-10-15T09:47:33.610224299Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"RHSA-2021:4513","title":"Red Hat Security Advisory: libsepol security update","status":"published","published":"2024-09-16T06:21:06Z","modified":"2026-06-26T12:21:17.199155225Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4513","title":"Moderate: libsepol security update","description":"The libsepol library provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies (for example, customizing policy boolean settings).\n\nSecurity Fix(es):\n\n* libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36084)\n\n* libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36085)\n\n* libsepol: use-after-free in cil_reset_classpermission() (CVE-2021-36086)\n\n* libsepol: heap-based buffer overflow in ebitmap_match_any() (CVE-2021-36087)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:39:50Z","modified":"2026-02-05T11:15:03.61832Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-36084","description":"The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).","status":"published","published":"2021-07-01T03:15:00Z","modified":"2026-04-22T12:57:03.645189Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"ALSA-2021:4513","title":"Moderate: libsepol security update","description":"The libsepol library provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies (for example, customizing policy boolean settings).\n\nSecurity Fix(es):\n\n* libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36084)\n\n* libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36085)\n\n* libsepol: use-after-free in cil_reset_classpermission() (CVE-2021-36086)\n\n* libsepol: heap-based buffer overflow in ebitmap_match_any() (CVE-2021-36087)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:39:50Z","modified":"2026-10-29T11:01:42.577459283Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-3930-1","title":"libsepol - security update","status":"published","published":"2024-10-22T00:00:00Z","modified":"2026-03-09T01:20:47.74067Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"USN-5391-1","title":"libsepol vulnerabilities","description":"Nicolas Iooss discovered that libsepol incorrectly handled memory\nwhen handling policies. An attacker could possibly use this issue\nto cause a crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2021-36084)\n\nIt was discovered that libsepol incorrectly handled memory when\nhandling policies. An attacker could possibly use this issue to cause\na crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2021-36085)\n\nIt was discovered that libsepol incorrectly handled memory when\nhandling policies. An attacker could possibly use this issue to cause\na crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affects Ubuntu 18.04 LTS, \nUbuntu 20.04 LTS and Ubuntu 21.10. (CVE-2021-36086)\n\nIt was discovered that libsepol incorrectly validated certain data,\nleading to a heap overflow. An attacker could possibly use this issue\nto cause a crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2021-36087)\n","status":"published","published":"2022-04-27T09:32:18Z","modified":"2026-06-25T13:31:08.963516976Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}