PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 20

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 20 / 44

  1. CVE-2021-40211ImageMagick: Division by zero in ReadEnhMetaFile lead to DoS
  2. CVE-2021-40153squashfs-tools: unvalidated filepaths allow writing outside of destination
  3. CVE-2021-39929wireshark: bluetooth DHT dissector crash
  4. CVE-2021-39928wireshark: IEEE 802.11 dissector crash
  5. CVE-2021-39926wireshark: bluetooth HCI_ISO dissector crash
  6. CVE-2021-39925wireshark: bluetooth SDP dissector crash
  7. CVE-2021-39924wireshark: bluetooth DHT dissector large loop
  8. CVE-2021-39923wireshark: PNRP dissector large loop
  9. CVE-2021-39922wireshark: C12.22 dissector crash
  10. CVE-2021-39921wireshark: modbus dissector crash
  11. CVE-2021-39920wireshark: IPPUSB dissector crash
  12. CVE-2021-39715kernel: leak of kernel memory and addresses due to information disclosure in log in __show_regs() in process.c
  13. CVE-2021-39714kernel: use-after-free due to an integer overflow in ion_buffer_kmap_get() in ion.c
  14. CVE-2021-39713kernel: race condition in the network scheduling subsystem could lead to an use-after-free
  15. CVE-2021-39711kernel: out-of-bounds read due to Incorrect size value in bpf_prog_test_run_skb() of test_run.c
  16. CVE-2021-39698kernel: use-after-free in the file polling implementation
  17. CVE-2021-39686kernel: race condition in the Android binder driver could lead to incorrect security checks
  18. CVE-2021-39685kernel: USB gadget buffer overflow
  19. CVE-2021-39648kernel: possible disclosure of memory due to a race condition in gadget_dev_desc_UDC_show() of configfs.c
  20. CVE-2021-39636kernel: information disclosure due to uninitialized data in do_ipt_get_ctl() and do_ipt_set_ctl() in ip_tables.c
  21. CVE-2021-39537ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c
  22. CVE-2021-39365grilo: missing TLS certificate verification
  23. CVE-2021-39360libzapojit: missing TLS certificate verification
  24. CVE-2021-39358gfbgraph: missing TLS certificate verification
  25. CVE-2021-39293golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196)
  26. CVE-2021-39275httpd: Out-of-bounds write in ap_escape_quotes() via malicious input
  27. CVE-2021-39272fetchmail: STARTTLS session encryption bypassing
  28. CVE-2021-39263ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute
  29. CVE-2021-39262ntfs-3g: Out-of-bounds access in ntfs_decompress()
  30. CVE-2021-39261ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite()
  31. CVE-2021-39260ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information()
  32. CVE-2021-39259ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length
  33. CVE-2021-39258ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find()
  34. CVE-2021-39257ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap
  35. CVE-2021-39256ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name()
  36. CVE-2021-39255ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute
  37. CVE-2021-39254ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()
  38. CVE-2021-39253ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i()
  39. CVE-2021-39252ntfs-3g: Out-of-bounds read in ntfs_ie_lookup()
  40. CVE-2021-39251ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open()
  41. CVE-2021-39242haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled
  42. CVE-2021-39241haproxy: an HTTP method name may contain a space followed by the name of a protected resource
  43. CVE-2021-39240haproxy: does not ensure that the scheme and path portions of a URI have the expected characters
  44. CVE-2021-39226grafana: Snapshot authentication bypass
  45. CVE-2021-39212ImageMagick: possible read or write in postscript files
  46. CVE-2021-39191mod_auth_openidc: open redirect due to target_link_uri parameter not validated
  47. CVE-2021-39154xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue
  48. CVE-2021-39153xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl
  49. CVE-2021-39152xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData
  50. CVE-2021-39151xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration
CVE 2021 document archive — Page 20 | PulseLinux