PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 16

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 16 / 44

  1. CVE-2021-46668mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements
  2. CVE-2021-46667mariadb: Integer overflow in sql_lex.cc integer leading to crash
  3. CVE-2021-46666mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause
  4. CVE-2021-46665mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations
  5. CVE-2021-46664mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr
  6. CVE-2021-46663mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements
  7. CVE-2021-46662mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries
  8. CVE-2021-46661mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)
  9. CVE-2021-46659mariadb: Crash executing query with VIEW, aggregate and subquery
  10. CVE-2021-46658mariadb: save_window_function_values triggers an abort during IN subquery
  11. CVE-2021-46657mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref
  12. CVE-2021-46283kernel: DoS in nf_tables_newset in net/netfilter/nf_tables_api.c
  13. CVE-2021-46195gcc: uncontrolled recursion in libiberty/rust-demangle.c
  14. CVE-2021-46143expat: Integer overflow in doProlog in xmlparse.c
  15. CVE-2021-46142uriparser: Invalid free operations in uriNormalizeSyntax.
  16. CVE-2021-46141uriparser: Invalid free operations in uriFreeUriMembers and uriMakeOwner
  17. CVE-2021-46101git: git.cmd can be run directly when using git pull to update the local warehouse
  18. CVE-2021-45985lua: heap-based buffer over-read
  19. CVE-2021-45960expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  20. CVE-2021-45957dnsmasq: a heap-based buffer overflow in answer_request
  21. CVE-2021-45956dnsmasq: a heap-based buffer overflow in print_mac
  22. CVE-2021-45955dnsmasq: heap-based buffer overflow in resize_packet
  23. CVE-2021-45954dnsmasq: a heap-based buffer overflow in extract_name
  24. CVE-2021-45953dnsmasq: a heap-based buffer overflow in extract_name
  25. CVE-2021-45952dnsmasq: a heap-based buffer overflow in dhcp_reply
  26. CVE-2021-45951dnsmasq: a heap-based buffer overflow in check_bad_address
  27. CVE-2021-45949ghostscript: heap-based buffer overflow in sampled_data_finish
  28. CVE-2021-45944ghostscript: use-after-free in sampled_data_sample may lead to DoS
  29. CVE-2021-45942OpenEXR: heap-based buffer overflow in Imf_3_1:LineCompositeTask:execute
  30. CVE-2021-45941libbpf: heap-based buffer overflow (8 bytes) in __bpf_object__open
  31. CVE-2021-45940libbpf: heap-based buffer overflow (4 bytes) in __bpf_object__open
  32. CVE-2021-45931harfbuzz: out-of-bounds write in hb_bit_set_invertible_t::set
  33. CVE-2021-45930qt: out-of-bounds write may lead to DoS
  34. CVE-2021-45868kernel: fs/quota/quota_tree.c does not validate the block number in the quota tree
  35. CVE-2021-45710tokio: Race leads to panic in oneshot::Sender::send()
  36. CVE-2021-45486kernel: information leak in the IPv4 implementation
  37. CVE-2021-45485kernel: information leak in the IPv6 implementation
  38. CVE-2021-45483webkitgtk: use-after-free in WebCore::Frame::page
  39. CVE-2021-45482webkitgtk: use-after-free in WebCore::ContainerNode::firstChild
  40. CVE-2021-45481webkitgtk: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create
  41. CVE-2021-45480kernel: memory leak in the __rds_conn_create() in net/rds/connection.c
  42. CVE-2021-45469kernel: out-of-bounds memory access in __f2fs_setxattr() in fs/f2fs/xattr.c when an inode has an invalid last xattr entry
  43. CVE-2021-45463gegl: shell expansion via a crafted pathname
  44. CVE-2021-45444zsh: Prompt expansion vulnerability
  45. CVE-2021-45417aide: heap-based buffer overflow on outputs larger than B64_BUF
  46. CVE-2021-45402kernel: pointer leak in check_alu_op() of kernel/bpf/verifier.c
  47. CVE-2021-45346sqlite: crafted SQL query allows a malicious user to obtain sensitive information
  48. CVE-2021-45261patch: Invalid Pointer via another_hunk function
  49. CVE-2021-45257nasm: Infinite loop via the paste_tokens function
  50. CVE-2021-45256nasm: Null pointer dereference via asm/preproc.c
CVE 2021 document archive — Page 16 | PulseLinux