Read the docs
TI-2021-10215 Aliases CVE-2021-29507

dlt-daemon could crash if there is special character in dlt.conf

Priority LOW 30CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail to generate their dlt logs in system. As of time of publication, no patch exists. As a workaround, one may check the integrity of information in configuration file manually.

Why it matters now

EPSS 0.00749 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
GENIVIdlt-daemon> 2.10.0, <= 2.18.6—No fix listedCNA
  • dlt-daemon VendorGENIVI Affected > 2.10.0, <= 2.18.6 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:genivi:diagnostic_log_and_trace:*:*:*:*:*:*:*:*2.10.0 – 2.18.6VulnerableGENIVI
  • cpe:2.3:a:genivi:diagnostic_log_and_trace:*:*:*:*:*:*:*:* Versions 2.10.0 – 2.18.6 Vulnerable ·GENIVI

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-29507

References

Advisory 1

  • TI-2022-18832 An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through… CVSS 3.1MEDIUM 5.5
  • TI-2022-18831 An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through… CVSS 3.1MEDIUM 5.5
  • TI-2020-18564 The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer… CVSS 3.1CRITICAL 9.8
  • TI-2020-17670 A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through… CVSS 3.1HIGH 7.8
  • TI-2022-13309 An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences