Uninitialized Memory Information Disclosure Vulnerability

CVE-2021-35000

What is CVE-2021-35000?

The OpenBSD Kernel contains a vulnerability related to multicast routing that allows local attackers to potentially disclose sensitive information. This issue arises from uninitialized memory being accessed in the multicast routing implementation. An attacker must first run low-privileged code on the target system to exploit this vulnerability. By leveraging this flaw alongside other vulnerabilities, there is an opportunity for privilege escalation, enabling arbitrary code execution in the kernel context.

References