PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 18

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 18 / 44

  1. CVE-2021-43784runc: integer overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration
  2. CVE-2021-43618gmp: Integer overflow and resultant buffer overflow via crafted input
  3. CVE-2021-43616npm: npm ci succeeds when package-lock.json doesn't match package.json
  4. CVE-2021-43612lldpd: out-of-bounds read when decoding SONMP packets
  5. CVE-2021-43566samba: Symlink race error can allow directory creation outside of the exported share
  6. CVE-2021-43565golang.org/x/crypto: empty plaintext packet causes panic
  7. CVE-2021-43546Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed
  8. CVE-2021-43545Mozilla: Denial of Service when using the Location API in a loop
  9. CVE-2021-43543Mozilla: Bypass of CSP sandbox directive when embedding
  10. CVE-2021-43542Mozilla: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
  11. CVE-2021-43541Mozilla: External protocol handler parameters were unescaped
  12. CVE-2021-43539Mozilla: GC rooting failure when calling wasm instance methods
  13. CVE-2021-43538Mozilla: Missing fullscreen and pointer lock notification when requesting both
  14. CVE-2021-43537Mozilla: Heap buffer overflow when using structured clone
  15. CVE-2021-43536Mozilla: URL leakage when navigating while executing asynchronous function
  16. CVE-2021-43535Mozilla: Use-after-free in HTTP2 Session object
  17. CVE-2021-43534Mozilla: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
  18. CVE-2021-43529thunderbird: Memory corruption when processing S/MIME messages
  19. CVE-2021-43528Mozilla: JavaScript unexpectedly enabled for the composition area
  20. CVE-2021-43527nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)
  21. CVE-2021-43519lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file
  22. CVE-2021-43400bluez: use-after-free in gatt-database.c
  23. CVE-2021-43396glibc: conversion from ISO-2022-JP-3 with iconv may emit spurious NUL character on state reset
  24. CVE-2021-43389kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c
  25. CVE-2021-43332mailman: a list moderator can crack the list admin password encrypted in a CSRF token
  26. CVE-2021-43331mailman: XSS in Cgi/options.py via crafted URL
  27. CVE-2021-43267kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
  28. CVE-2021-43138async: Prototype Pollution in async
  29. CVE-2021-43085openssl: Insecure permissions vulnerability due to an error in the implementation of the CMAC_Final() function
  30. CVE-2021-43057kernel: use-after-free in the SELinux handler for PTRACE_TRACEME
  31. CVE-2021-43056kernel: ppc: kvm: allows a malicious KVM guest to crash the host
  32. CVE-2021-42782opensc: Stack buffer overflow issues in various places
  33. CVE-2021-42781opensc: Heap buffer overflow in pkcs15-oberthur.c
  34. CVE-2021-42780opensc: Use after return in insert_pin function
  35. CVE-2021-42779opensc: Heap use after free in sc_file_valid
  36. CVE-2021-42778opensc: Heap double free in sc_pkcs15_free_tokeninfo
  37. CVE-2021-42771python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code
  38. CVE-2021-42762webkitgtk: limited sandbox escape via VFS syscalls
  39. CVE-2021-42739kernel: Heap buffer overflow in firedtv driver
  40. CVE-2021-42716stb: heap-based buffer overflow in stb_image PNM loader
  41. CVE-2021-42715stb: DoS in stb_image HDR loader via a crafted file
  42. CVE-2021-42704inkscape: out-of-bounds write vulnerbility in inkscape
  43. CVE-2021-42702inkscape: Inkscape can access an uninitialized pointer that allowes to unauthorized information.
  44. CVE-2021-42700inkscape: out-of-bounds read found in Inkscape
  45. CVE-2021-42694environment: Homoglyph characters can lead to trojan source attack
  46. CVE-2021-42581ramda: prototype poisoning
  47. CVE-2021-42574environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks
  48. CVE-2021-42523colord: potential memory leak, forgetting to free error message of libsqlite3 API 'sqlite3_exec' -1
  49. CVE-2021-42340tomcat: OutOfMemoryError caused by HTTP upgrade connection leak could lead to DoS
  50. CVE-2021-42327kernel: heap-based buffer overflow in dp_link_settings_write() in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c
CVE 2021 document archive — Page 18 | PulseLinux