Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2021-4276 Details

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dsc_import_input_from_source of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 58922c345d3d1fe89bb2020111873a3e07ca93ac. It is recommended to apply a patch to fix this issue. VDB-216746 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: We do assume that the Data Manager server can only be accessed by authorised users. Because of this, we don’t believe this specific attack is possible without such a compromise of the Data Manager server.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://github.com/dns-stats/hedgehog/commit/58922c345d3d1fe89bb2020111873a3e07ca93ac CVEPatchThird Party Advisory
https://github.com/dns-stats/hedgehog/pull/190 CVEPatchThird Party Advisory
https://vuldb.com/?id.216746 CVEThird Party Advisory
https://github.com/dns-stats/hedgehog/commit/58922c345d3d1fe89bb2020111873a3e07ca93ac [email protected]PatchThird Party Advisory
https://github.com/dns-stats/hedgehog/pull/190 [email protected]PatchThird Party Advisory

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')[email protected]

Affected Products

ProductVersions
dns-stats hedgehog
< 2021-05-13

CPE

  • cpe:2.3:a:dns-stats:hedgehog:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

12 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2021-4276
NVD Published Date:
Dec 25, 2022
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2021-4276 Details - Not Deferred