PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 17

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 17 / 44

  1. CVE-2021-45105log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern
  2. CVE-2021-45100kernel: ksmbd server communicates in cleartext even though encryption has been enabled due to a violation of the SMB protocol specification
  3. CVE-2021-45095kernel: refcount leak in pep_sock_accept() in net/phonet/pep.c
  4. CVE-2021-45083cobbler: unsafe permissions on sensitive files in /etc/cobbler
  5. CVE-2021-45082cobbler: incomplete template sanitization
  6. CVE-2021-45081cobbler: unsafe protocol usage
  7. CVE-2021-45078binutils: out-of-bounds write in stab_xcoff_builtin_type() in stabs.c
  8. CVE-2021-45046log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228)
  9. CVE-2021-44964lua: use after free allows Sandbox Escape
  10. CVE-2021-44917gnuplot: Divide by Zero in the boundary3d function in graph3d.c
  11. CVE-2021-44907qs: Insufficient sanitization of property in the gs.parse function
  12. CVE-2021-44906minimist: prototype pollution
  13. CVE-2021-44879kernel: NULL pointer dereference in folio_mark_dirty() via a crafted f2fs image
  14. CVE-2021-44832log4j-core: remote code execution via JDBC Appender
  15. CVE-2021-44790httpd: mod_lua: Possible buffer overflow when parsing multipart content
  16. CVE-2021-44733kernel: use-after-free in the TEE subsystem
  17. CVE-2021-44717golang: syscall: don't close fd 0 on ForkExec error
  18. CVE-2021-44716golang: net/http: limit growth of header canonicalization cache
  19. CVE-2021-44648gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data
  20. CVE-2021-44647lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS
  21. CVE-2021-44577libsolv: Heap overflow
  22. CVE-2021-44576libsolv: Heap overflow
  23. CVE-2021-44575libsolv: Heap overflow
  24. CVE-2021-44574libsolv: Heap overflow
  25. CVE-2021-44573libsolv: Heap overflow
  26. CVE-2021-44571libsolv: Heap overflow
  27. CVE-2021-44570libsolv: Heap overflow
  28. CVE-2021-44569libsolv: Heap overflow
  29. CVE-2021-44568libsolv: heap-overflows in resolve_dependencies function
  30. CVE-2021-44533nodejs: Incorrect handling of certificate subject and issuer fields
  31. CVE-2021-44532nodejs: Certificate Verification Bypass via String Injection
  32. CVE-2021-44531nodejs: Improper handling of URI Subject Alternative Names
  33. CVE-2021-44269wavpack: Heap out-of-bounds read in WavpackPackSamples()
  34. CVE-2021-44228log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value
  35. CVE-2021-44227mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover
  36. CVE-2021-44225keepalived: dbus access control bypass
  37. CVE-2021-44224httpd: possible NULL dereference or SSRF in forward proxy configurations
  38. CVE-2021-44142samba: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution
  39. CVE-2021-44141samba: Information leak via symlinks of existance of files or directories outside of the exported share
  40. CVE-2021-44038quagga: unsafe chown/chmod operations may lead to privileges escalation
  41. CVE-2021-43980Tomcat: Information disclosure
  42. CVE-2021-43976kernel: mwifiex_usb_recv() in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker to cause DoS via crafted USB device
  43. CVE-2021-43975kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c
  44. CVE-2021-43860flatpak: Permissions granted to applications can be hidden from the user at install time
  45. CVE-2021-43859xstream: Injecting highly recursive collections or maps can cause a DoS
  46. CVE-2021-43818python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through
  47. CVE-2021-43815grafana: directory traversal for .csv files
  48. CVE-2021-43813grafana: directory traversal vulnerability
  49. CVE-2021-43809rubygem-bundler: unexpected code execution in Gemfiles
  50. CVE-2021-43798grafana: path traversal vulnerability
CVE 2021 document archive — Page 17 | PulseLinux