{"id":"UBUNTU-CVE-2021-37311","details":"Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the application's listening port.","modified":"2026-05-20T16:06:28.792595093Z","published":"2023-02-03T18:15:00Z","upstream":["CVE-2021-37311"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-37311"},{"type":"REPORT","url":"https://fcitx-im.org"},{"type":"REPORT","url":"https://github.com/fcitx/fcitx5/pull/308"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2021-37311"}],"affected":[{"package":{"name":"fcitx5","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/fcitx5?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20181128+ds1-1build1","0~20191021+ds1-1","0~20191021+ds2-1","0~20191021+ds2-2","0.0~git20191114.c2b3517+ds1-1","0.0~git20191231.c0a272a+ds1-1","0.0~git20191231.c0a272a+ds1-2","0.0~git20200117.a2871df+ds2-1","0.0~git20200128.9e3bc8d+ds1-1","0.0~git20200128.9e3bc8d+ds1-2","0.0~git20200128.9e3bc8d+ds1-3"],"ecosystem_specific":{"binaries":[{"binary_name":"fcitx5","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"fcitx5-data","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"fcitx5-module-dbus","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_version":"0.0~git20200128.9e3bc8d+ds1-3","binary_name":"fcitx5-module-ibus"},{"binary_name":"fcitx5-module-kimpanel","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"fcitx5-module-quickphrase","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"fcitx5-module-wayland","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"fcitx5-module-xorg","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"fcitx5-modules","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"libfcitx5config5","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"libfcitx5core5","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"},{"binary_name":"libfcitx5utils1","binary_version":"0.0~git20200128.9e3bc8d+ds1-3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-37311.json"}},{"package":{"name":"fcitx5","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/fcitx5?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.5-1ubuntu2","5.0.9-2","5.0.10-1","5.0.11-1","5.0.12-1","5.0.13-1","5.0.14-1"],"ecosystem_specific":{"binaries":[{"binary_name":"fcitx5","binary_version":"5.0.14-1"},{"binary_name":"fcitx5-data","binary_version":"5.0.14-1"},{"binary_version":"5.0.14-1","binary_name":"fcitx5-module-emoji"},{"binary_name":"fcitx5-module-quickphrase","binary_version":"5.0.14-1"},{"binary_name":"fcitx5-module-wayland","binary_version":"5.0.14-1"},{"binary_name":"fcitx5-module-xorg","binary_version":"5.0.14-1"},{"binary_version":"5.0.14-1","binary_name":"fcitx5-modules"},{"binary_name":"libfcitx5config6","binary_version":"5.0.14-1"},{"binary_name":"libfcitx5core7","binary_version":"5.0.14-1"},{"binary_name":"libfcitx5utils2","binary_version":"5.0.14-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-37311.json"}},{"package":{"name":"fcitx5","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/fcitx5?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.0-1","5.1.1-1","5.1.2-1","5.1.3-1","5.1.4-1","5.1.5-1","5.1.6-1","5.1.6-2","5.1.7-1","5.1.7-1build2","5.1.7-1build3"],"ecosystem_specific":{"binaries":[{"binary_version":"5.1.7-1build3","binary_name":"fcitx5"},{"binary_name":"fcitx5-data","binary_version":"5.1.7-1build3"},{"binary_version":"5.1.7-1build3","binary_name":"fcitx5-frontend-all"},{"binary_version":"5.1.7-1build3","binary_name":"fcitx5-modules"},{"binary_name":"libfcitx5config6","binary_version":"5.1.7-1build3"},{"binary_version":"5.1.7-1build3","binary_name":"libfcitx5core7"},{"binary_name":"libfcitx5utils2","binary_version":"5.1.7-1build3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-37311.json"}},{"package":{"name":"fcitx5","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/fcitx5?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.12-2","5.1.14-1"],"ecosystem_specific":{"binaries":[{"binary_name":"fcitx5","binary_version":"5.1.14-1"},{"binary_name":"fcitx5-data","binary_version":"5.1.14-1"},{"binary_version":"5.1.14-1","binary_name":"fcitx5-frontend-all"},{"binary_name":"fcitx5-modules","binary_version":"5.1.14-1"},{"binary_name":"libfcitx5config6","binary_version":"5.1.14-1"},{"binary_version":"5.1.14-1","binary_name":"libfcitx5core7"},{"binary_version":"5.1.14-1","binary_name":"libfcitx5utils2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-37311.json"}},{"package":{"name":"fcitx5","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/fcitx5?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.14-1","5.1.16-1","5.1.17-1","5.1.19-1"],"ecosystem_specific":{"binaries":[{"binary_name":"fcitx5","binary_version":"5.1.19-1"},{"binary_name":"fcitx5-data","binary_version":"5.1.19-1"},{"binary_name":"fcitx5-frontend-all","binary_version":"5.1.19-1"},{"binary_version":"5.1.19-1","binary_name":"fcitx5-modules"},{"binary_version":"5.1.19-1","binary_name":"libfcitx5config6"},{"binary_name":"libfcitx5core7","binary_version":"5.1.19-1"},{"binary_name":"libfcitx5utils2","binary_version":"5.1.19-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-37311.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}