{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Heap buffer overflow in the block buffer management code",
    "tracking": {
      "current_release_date": "2026-07-24T21:32:46+00:00",
      "generator": {
        "date": "2026-07-24T21:32:46+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.1.0"
        }
      },
      "id": "CVE-2021-3345",
      "initial_release_date": "2021-01-29T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-07-24T21:32:46+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.10.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.10.z",
              "product_id": "rhel-8.10.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.2.0.z",
              "product_id": "rhel-8.2.0.z.aus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_aus:8.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.4.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.4.0.z",
              "product_id": "rhel-8.4.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:8.4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.6.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.6.0.z",
              "product_id": "rhel-8.6.0.z.aus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_aus:8.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.8.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.8.0.z",
              "product_id": "rhel-8.8.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:8.8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.0.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.0.0.z",
              "product_id": "rhel-9.0.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.0"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.2.0.z",
              "product_id": "rhel-9.2.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.4.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.4.z",
              "product_id": "rhel-9.4.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.6.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.6.z",
              "product_id": "rhel-9.6.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.7",
            "product": {
              "name": "Red Hat Enterprise Linux 9.7",
              "product_id": "rhel-9.7",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.7.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.7.z",
              "product_id": "rhel-9.7.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.8",
            "product": {
              "name": "Red Hat Enterprise Linux 9.8",
              "product_id": "rhel-9.8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libgcrypt",
            "product": {
              "name": "libgcrypt",
              "product_id": "libgcrypt",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libgcrypt"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libgcrypt-debuginfo",
            "product": {
              "name": "libgcrypt-debuginfo",
              "product_id": "libgcrypt-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libgcrypt-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libgcrypt-debugsource",
            "product": {
              "name": "libgcrypt-debugsource",
              "product_id": "libgcrypt-debugsource",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libgcrypt-debugsource"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libgcrypt-devel",
            "product": {
              "name": "libgcrypt-devel",
              "product_id": "libgcrypt-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libgcrypt-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libgcrypt-devel-debuginfo",
            "product": {
              "name": "libgcrypt-devel-debuginfo",
              "product_id": "libgcrypt-devel-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libgcrypt-devel-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libgcrypt",
            "product": {
              "name": "libgcrypt",
              "product_id": "libgcrypt.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libgcrypt?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:libgcrypt"
        },
        "product_reference": "libgcrypt",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debuginfo as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:libgcrypt-debuginfo"
        },
        "product_reference": "libgcrypt-debuginfo",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:libgcrypt-debugsource"
        },
        "product_reference": "libgcrypt-debugsource",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:libgcrypt-debugsource"
        },
        "product_reference": "libgcrypt-debugsource",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:libgcrypt-debugsource"
        },
        "product_reference": "libgcrypt-debugsource",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:libgcrypt-debugsource"
        },
        "product_reference": "libgcrypt-debugsource",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debugsource as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:libgcrypt-debugsource"
        },
        "product_reference": "libgcrypt-debugsource",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debugsource as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:libgcrypt-debugsource"
        },
        "product_reference": "libgcrypt-debugsource",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-debugsource as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:libgcrypt-debugsource"
        },
        "product_reference": "libgcrypt-debugsource",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:libgcrypt-devel"
        },
        "product_reference": "libgcrypt-devel",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel-debuginfo as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:libgcrypt-devel-debuginfo"
        },
        "product_reference": "libgcrypt-devel-debuginfo",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel-debuginfo as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:libgcrypt-devel-debuginfo"
        },
        "product_reference": "libgcrypt-devel-debuginfo",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel-debuginfo as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:libgcrypt-devel-debuginfo"
        },
        "product_reference": "libgcrypt-devel-debuginfo",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:libgcrypt-devel-debuginfo"
        },
        "product_reference": "libgcrypt-devel-debuginfo",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:libgcrypt-devel-debuginfo"
        },
        "product_reference": "libgcrypt-devel-debuginfo",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:libgcrypt-devel-debuginfo"
        },
        "product_reference": "libgcrypt-devel-debuginfo",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt-devel-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:libgcrypt-devel-debuginfo"
        },
        "product_reference": "libgcrypt-devel-debuginfo",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 8.2.0.z",
          "product_id": "rhel-8.2.0.z.aus:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-8.2.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgcrypt.src as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:libgcrypt.src"
        },
        "product_reference": "libgcrypt.src",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-3345",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2021-02-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:libgcrypt",
            "rhel-6-els.els:libgcrypt-debuginfo",
            "rhel-6-els.els:libgcrypt-devel",
            "rhel-6-els.els:libgcrypt.src",
            "rhel-7-els.els:libgcrypt",
            "rhel-7-els.els:libgcrypt-debuginfo",
            "rhel-7-els.els:libgcrypt-devel",
            "rhel-7-els.els:libgcrypt.src",
            "rhel-8.10.z:libgcrypt",
            "rhel-8.10.z:libgcrypt-debuginfo",
            "rhel-8.10.z:libgcrypt-debugsource",
            "rhel-8.10.z:libgcrypt-devel",
            "rhel-8.10.z:libgcrypt-devel-debuginfo",
            "rhel-8.10.z:libgcrypt.src",
            "rhel-8.2.0.z.aus:libgcrypt.src",
            "rhel-8.4.0.z.eus:libgcrypt",
            "rhel-8.4.0.z.eus:libgcrypt-debuginfo",
            "rhel-8.4.0.z.eus:libgcrypt-debugsource",
            "rhel-8.4.0.z.eus:libgcrypt-devel",
            "rhel-8.4.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-8.4.0.z.eus:libgcrypt.src",
            "rhel-8.6.0.z.aus:libgcrypt",
            "rhel-8.6.0.z.aus:libgcrypt-debuginfo",
            "rhel-8.6.0.z.aus:libgcrypt-debugsource",
            "rhel-8.6.0.z.aus:libgcrypt-devel",
            "rhel-8.6.0.z.aus:libgcrypt-devel-debuginfo",
            "rhel-8.6.0.z.aus:libgcrypt.src",
            "rhel-8.8.0.z.eus:libgcrypt",
            "rhel-8.8.0.z.eus:libgcrypt-debuginfo",
            "rhel-8.8.0.z.eus:libgcrypt-debugsource",
            "rhel-8.8.0.z.eus:libgcrypt-devel",
            "rhel-8.8.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-8.8.0.z.eus:libgcrypt.src",
            "rhel-9.0.0.z.eus:libgcrypt-devel",
            "rhel-9.0.0.z.eus:libgcrypt.src",
            "rhel-9.2.0.z.eus:libgcrypt",
            "rhel-9.2.0.z.eus:libgcrypt-debuginfo",
            "rhel-9.2.0.z.eus:libgcrypt-debugsource",
            "rhel-9.2.0.z.eus:libgcrypt-devel",
            "rhel-9.2.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.2.0.z.eus:libgcrypt.src",
            "rhel-9.4.z.eus:libgcrypt",
            "rhel-9.4.z.eus:libgcrypt-debuginfo",
            "rhel-9.4.z.eus:libgcrypt-debugsource",
            "rhel-9.4.z.eus:libgcrypt-devel",
            "rhel-9.4.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.4.z.eus:libgcrypt.src",
            "rhel-9.6.z.eus:libgcrypt",
            "rhel-9.6.z.eus:libgcrypt-debuginfo",
            "rhel-9.6.z.eus:libgcrypt-debugsource",
            "rhel-9.6.z.eus:libgcrypt-devel",
            "rhel-9.6.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.6.z.eus:libgcrypt.src",
            "rhel-9.7.z:libgcrypt-devel",
            "rhel-9.7.z:libgcrypt.src",
            "rhel-9.7:libgcrypt-devel",
            "rhel-9.7:libgcrypt.src",
            "rhel-9.8:libgcrypt-devel",
            "rhel-9.8:libgcrypt.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "No Red Hat products are affected by this flaw, as the vulnerable version of libgcrypt (1.9.0) has not been shipped in any products.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "A flaw was found in libgcrypt. A heap-based buffer overflow in the block buffer management code may lead to memory corruption before any verification is made or signature is validated. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "rhel-6-els.els:libgcrypt",
          "rhel-6-els.els:libgcrypt-debuginfo",
          "rhel-6-els.els:libgcrypt-devel",
          "rhel-6-els.els:libgcrypt.src",
          "rhel-7-els.els:libgcrypt",
          "rhel-7-els.els:libgcrypt-debuginfo",
          "rhel-7-els.els:libgcrypt-devel",
          "rhel-7-els.els:libgcrypt.src",
          "rhel-8.10.z:libgcrypt",
          "rhel-8.10.z:libgcrypt-debuginfo",
          "rhel-8.10.z:libgcrypt-debugsource",
          "rhel-8.10.z:libgcrypt-devel",
          "rhel-8.10.z:libgcrypt-devel-debuginfo",
          "rhel-8.10.z:libgcrypt.src",
          "rhel-8.2.0.z.aus:libgcrypt.src",
          "rhel-8.4.0.z.eus:libgcrypt",
          "rhel-8.4.0.z.eus:libgcrypt-debuginfo",
          "rhel-8.4.0.z.eus:libgcrypt-debugsource",
          "rhel-8.4.0.z.eus:libgcrypt-devel",
          "rhel-8.4.0.z.eus:libgcrypt-devel-debuginfo",
          "rhel-8.4.0.z.eus:libgcrypt.src",
          "rhel-8.6.0.z.aus:libgcrypt",
          "rhel-8.6.0.z.aus:libgcrypt-debuginfo",
          "rhel-8.6.0.z.aus:libgcrypt-debugsource",
          "rhel-8.6.0.z.aus:libgcrypt-devel",
          "rhel-8.6.0.z.aus:libgcrypt-devel-debuginfo",
          "rhel-8.6.0.z.aus:libgcrypt.src",
          "rhel-8.8.0.z.eus:libgcrypt",
          "rhel-8.8.0.z.eus:libgcrypt-debuginfo",
          "rhel-8.8.0.z.eus:libgcrypt-debugsource",
          "rhel-8.8.0.z.eus:libgcrypt-devel",
          "rhel-8.8.0.z.eus:libgcrypt-devel-debuginfo",
          "rhel-8.8.0.z.eus:libgcrypt.src",
          "rhel-9.0.0.z.eus:libgcrypt-devel",
          "rhel-9.0.0.z.eus:libgcrypt.src",
          "rhel-9.2.0.z.eus:libgcrypt",
          "rhel-9.2.0.z.eus:libgcrypt-debuginfo",
          "rhel-9.2.0.z.eus:libgcrypt-debugsource",
          "rhel-9.2.0.z.eus:libgcrypt-devel",
          "rhel-9.2.0.z.eus:libgcrypt-devel-debuginfo",
          "rhel-9.2.0.z.eus:libgcrypt.src",
          "rhel-9.4.z.eus:libgcrypt",
          "rhel-9.4.z.eus:libgcrypt-debuginfo",
          "rhel-9.4.z.eus:libgcrypt-debugsource",
          "rhel-9.4.z.eus:libgcrypt-devel",
          "rhel-9.4.z.eus:libgcrypt-devel-debuginfo",
          "rhel-9.4.z.eus:libgcrypt.src",
          "rhel-9.6.z.eus:libgcrypt",
          "rhel-9.6.z.eus:libgcrypt-debuginfo",
          "rhel-9.6.z.eus:libgcrypt-debugsource",
          "rhel-9.6.z.eus:libgcrypt-devel",
          "rhel-9.6.z.eus:libgcrypt-devel-debuginfo",
          "rhel-9.6.z.eus:libgcrypt.src",
          "rhel-9.7.z:libgcrypt-devel",
          "rhel-9.7.z:libgcrypt.src",
          "rhel-9.7:libgcrypt-devel",
          "rhel-9.7:libgcrypt.src",
          "rhel-9.8:libgcrypt-devel",
          "rhel-9.8:libgcrypt.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3345"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3345"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3345"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL"
          },
          "products": [
            "rhel-6-els.els:libgcrypt",
            "rhel-6-els.els:libgcrypt-debuginfo",
            "rhel-6-els.els:libgcrypt-devel",
            "rhel-6-els.els:libgcrypt.src",
            "rhel-7-els.els:libgcrypt",
            "rhel-7-els.els:libgcrypt-debuginfo",
            "rhel-7-els.els:libgcrypt-devel",
            "rhel-7-els.els:libgcrypt.src",
            "rhel-8.10.z:libgcrypt",
            "rhel-8.10.z:libgcrypt-debuginfo",
            "rhel-8.10.z:libgcrypt-debugsource",
            "rhel-8.10.z:libgcrypt-devel",
            "rhel-8.10.z:libgcrypt-devel-debuginfo",
            "rhel-8.10.z:libgcrypt.src",
            "rhel-8.2.0.z.aus:libgcrypt.src",
            "rhel-8.4.0.z.eus:libgcrypt",
            "rhel-8.4.0.z.eus:libgcrypt-debuginfo",
            "rhel-8.4.0.z.eus:libgcrypt-debugsource",
            "rhel-8.4.0.z.eus:libgcrypt-devel",
            "rhel-8.4.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-8.4.0.z.eus:libgcrypt.src",
            "rhel-8.6.0.z.aus:libgcrypt",
            "rhel-8.6.0.z.aus:libgcrypt-debuginfo",
            "rhel-8.6.0.z.aus:libgcrypt-debugsource",
            "rhel-8.6.0.z.aus:libgcrypt-devel",
            "rhel-8.6.0.z.aus:libgcrypt-devel-debuginfo",
            "rhel-8.6.0.z.aus:libgcrypt.src",
            "rhel-8.8.0.z.eus:libgcrypt",
            "rhel-8.8.0.z.eus:libgcrypt-debuginfo",
            "rhel-8.8.0.z.eus:libgcrypt-debugsource",
            "rhel-8.8.0.z.eus:libgcrypt-devel",
            "rhel-8.8.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-8.8.0.z.eus:libgcrypt.src",
            "rhel-9.0.0.z.eus:libgcrypt-devel",
            "rhel-9.0.0.z.eus:libgcrypt.src",
            "rhel-9.2.0.z.eus:libgcrypt",
            "rhel-9.2.0.z.eus:libgcrypt-debuginfo",
            "rhel-9.2.0.z.eus:libgcrypt-debugsource",
            "rhel-9.2.0.z.eus:libgcrypt-devel",
            "rhel-9.2.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.2.0.z.eus:libgcrypt.src",
            "rhel-9.4.z.eus:libgcrypt",
            "rhel-9.4.z.eus:libgcrypt-debuginfo",
            "rhel-9.4.z.eus:libgcrypt-debugsource",
            "rhel-9.4.z.eus:libgcrypt-devel",
            "rhel-9.4.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.4.z.eus:libgcrypt.src",
            "rhel-9.6.z.eus:libgcrypt",
            "rhel-9.6.z.eus:libgcrypt-debuginfo",
            "rhel-9.6.z.eus:libgcrypt-debugsource",
            "rhel-9.6.z.eus:libgcrypt-devel",
            "rhel-9.6.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.6.z.eus:libgcrypt.src",
            "rhel-9.7.z:libgcrypt-devel",
            "rhel-9.7.z:libgcrypt.src",
            "rhel-9.7:libgcrypt-devel",
            "rhel-9.7:libgcrypt.src",
            "rhel-9.8:libgcrypt-devel",
            "rhel-9.8:libgcrypt.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical",
          "product_ids": [
            "rhel-6-els.els:libgcrypt",
            "rhel-6-els.els:libgcrypt-debuginfo",
            "rhel-6-els.els:libgcrypt-devel",
            "rhel-6-els.els:libgcrypt.src",
            "rhel-7-els.els:libgcrypt",
            "rhel-7-els.els:libgcrypt-debuginfo",
            "rhel-7-els.els:libgcrypt-devel",
            "rhel-7-els.els:libgcrypt.src",
            "rhel-8.10.z:libgcrypt",
            "rhel-8.10.z:libgcrypt-debuginfo",
            "rhel-8.10.z:libgcrypt-debugsource",
            "rhel-8.10.z:libgcrypt-devel",
            "rhel-8.10.z:libgcrypt-devel-debuginfo",
            "rhel-8.10.z:libgcrypt.src",
            "rhel-8.2.0.z.aus:libgcrypt.src",
            "rhel-8.4.0.z.eus:libgcrypt",
            "rhel-8.4.0.z.eus:libgcrypt-debuginfo",
            "rhel-8.4.0.z.eus:libgcrypt-debugsource",
            "rhel-8.4.0.z.eus:libgcrypt-devel",
            "rhel-8.4.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-8.4.0.z.eus:libgcrypt.src",
            "rhel-8.6.0.z.aus:libgcrypt",
            "rhel-8.6.0.z.aus:libgcrypt-debuginfo",
            "rhel-8.6.0.z.aus:libgcrypt-debugsource",
            "rhel-8.6.0.z.aus:libgcrypt-devel",
            "rhel-8.6.0.z.aus:libgcrypt-devel-debuginfo",
            "rhel-8.6.0.z.aus:libgcrypt.src",
            "rhel-8.8.0.z.eus:libgcrypt",
            "rhel-8.8.0.z.eus:libgcrypt-debuginfo",
            "rhel-8.8.0.z.eus:libgcrypt-debugsource",
            "rhel-8.8.0.z.eus:libgcrypt-devel",
            "rhel-8.8.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-8.8.0.z.eus:libgcrypt.src",
            "rhel-9.0.0.z.eus:libgcrypt-devel",
            "rhel-9.0.0.z.eus:libgcrypt.src",
            "rhel-9.2.0.z.eus:libgcrypt",
            "rhel-9.2.0.z.eus:libgcrypt-debuginfo",
            "rhel-9.2.0.z.eus:libgcrypt-debugsource",
            "rhel-9.2.0.z.eus:libgcrypt-devel",
            "rhel-9.2.0.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.2.0.z.eus:libgcrypt.src",
            "rhel-9.4.z.eus:libgcrypt",
            "rhel-9.4.z.eus:libgcrypt-debuginfo",
            "rhel-9.4.z.eus:libgcrypt-debugsource",
            "rhel-9.4.z.eus:libgcrypt-devel",
            "rhel-9.4.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.4.z.eus:libgcrypt.src",
            "rhel-9.6.z.eus:libgcrypt",
            "rhel-9.6.z.eus:libgcrypt-debuginfo",
            "rhel-9.6.z.eus:libgcrypt-debugsource",
            "rhel-9.6.z.eus:libgcrypt-devel",
            "rhel-9.6.z.eus:libgcrypt-devel-debuginfo",
            "rhel-9.6.z.eus:libgcrypt.src",
            "rhel-9.7.z:libgcrypt-devel",
            "rhel-9.7.z:libgcrypt.src",
            "rhel-9.7:libgcrypt-devel",
            "rhel-9.7:libgcrypt.src",
            "rhel-9.8:libgcrypt-devel",
            "rhel-9.8:libgcrypt.src"
          ]
        }
      ],
      "title": "Heap buffer overflow in the block buffer management code"
    }
  ]
}