High severity8.8NVD Advisory· Published Nov 7, 2021· Updated Jun 17, 2026

CVE-2021-43413

Description

An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file, allowing anyone to modify any files that they can read. This can be trivially exploited to get full root access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Hurd2 versions
cpe:2.3:a:gnu:hurd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:hurd:*:*:*:*:*:*:*:*range: <0.9.20210404-9
- (no CPE)range: <0.9 20210404-9
GNU/GNU Hurddescription

Patches

Vulnerability mechanics

References

lists.gnu.org/archive/html/bug-hurd/2021-05/msg00079.htmlnvdExploitMailing ListVendor Advisory
lists.gnu.org/archive/html/bug-hurd/2002-11/msg00263.htmlnvdMailing ListVendor Advisory
lists.gnu.org/archive/html/bug-hurd/2005-06/msg00191.htmlnvdMailing ListVendor Advisory
www.mail-archive.com/bug-hurd%40gnu.org/msg32113.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000