PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 21

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 21 / 44

  1. CVE-2021-39150xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*
  2. CVE-2021-39149xstream: Arbitrary code execution via unsafe deserialization of com.sun.corba.*
  3. CVE-2021-39148xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.toolkit.dir.ContextEnumerator
  4. CVE-2021-39147xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration
  5. CVE-2021-39146xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue
  6. CVE-2021-39145xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration
  7. CVE-2021-39144xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.*
  8. CVE-2021-39141xstream: Arbitrary code execution via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*
  9. CVE-2021-39140xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler
  10. CVE-2021-39139xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl
  11. CVE-2021-39135nodejs-arborist: symlink following vulnerability
  12. CVE-2021-39134nodejs-arborist: symlink following vulnerability
  13. CVE-2021-38604glibc: NULL pointer dereference in helper_thread() in mq_notify.c while handling NOTIFY_REMOVED messages
  14. CVE-2021-38593qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke
  15. CVE-2021-38578edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation
  16. CVE-2021-38575edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe
  17. CVE-2021-38561golang: out-of-bounds read in golang.org/x/text/language leads to DoS
  18. CVE-2021-38510Mozilla: Download Protections were bypassed by .inetloc files on Mac OS
  19. CVE-2021-38509Mozilla: Javascript alert box could have been spoofed onto an arbitrary domain
  20. CVE-2021-38508Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
  21. CVE-2021-38507Mozilla: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports
  22. CVE-2021-38506Mozilla: Firefox could be coaxed into going into fullscreen mode without notification or warning
  23. CVE-2021-38505Mozilla: Windows 10 Cloud Clipboard may have recorded sensitive user data
  24. CVE-2021-38504Mozilla: Use-after-free in file picker dialog
  25. CVE-2021-38503Mozilla: iframe sandbox rules did not apply to XSLT stylesheets
  26. CVE-2021-38502Mozilla: Downgrade attack on SMTP STARTTLS connections
  27. CVE-2021-38501Mozilla: Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2
  28. CVE-2021-38500Mozilla: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2
  29. CVE-2021-38498Mozilla: Use-after-free of nsLanguageAtomService object
  30. CVE-2021-38497Mozilla: Validation message could have been overlaid on another origin
  31. CVE-2021-38496Mozilla: Use-after-free in MessageTask
  32. CVE-2021-38495Mozilla: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
  33. CVE-2021-38493Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1
  34. CVE-2021-38492Mozilla: Navigating to `mk:` URL scheme could load Internet Explorer
  35. CVE-2021-38373kmail: STARTTLS is ignored when "Server requires authentication" not checked in UI
  36. CVE-2021-38300kernel: crafting anomalous machine code may lead to arbitrary Kernel code execution
  37. CVE-2021-38297golang: Command-line arguments may overwrite global data
  38. CVE-2021-38209kernel: net/netfilter/nf_conntrack_standalone.c allows observation of changes in any net namespace because these changes are leaked into all other net namespaces
  39. CVE-2021-38208kernel: NULL pointer dereference in net/nfc/llcp_sock.c by making a getsockname call after a certain type of failure of a bind call
  40. CVE-2021-38207kernel: buffer overflow in drivers/net/ethernet/xilinx/ll_temac_main.c by sending heavy network traffic for about ten minutes
  41. CVE-2021-38206kernel: NULL pointer dereference in the radiotap parser by injecting a frame with 802.11a rates in mac80211 subsystem
  42. CVE-2021-38205kernel: drivers/net/ethernet/xilinx/xilinx_emaclite.c prints the real IOMEM pointer
  43. CVE-2021-38204kernel: use-after-free and panic in drivers/usb/host/max3421-hcd.c by removing a MAX-3421 USB device in certain situations
  44. CVE-2021-38203kernel: btrfs: deadlock via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system space_info
  45. CVE-2021-38202kernel: out-of-bounds read in TRACE_EVENT() in fs/nfsd/trace.h by sending NFS traffic when the trace event framework is being used for nfsd
  46. CVE-2021-38201kernel: slab-out-of-bounds access in xdr_set_page_base() in net/sunrpc/xdr.c
  47. CVE-2021-38200kernel: arch/powerpc/perf/core-book3s.c allows local users to cause a DoS via a perf record command
  48. CVE-2021-38199kernel: incorrect connection-setup ordering allows operators of remote NFSv4 servers to cause a DoS
  49. CVE-2021-38198kernel: arch/x86/kvm/mmu/paging_tmpl.h incorrectly computes the access permissions of a shadow page
  50. CVE-2021-38185cpio: integer overflow in ds_fgetstr() in dstring.c can lead to an out-of-bounds write via a crafted pattern file
CVE 2021 document archive — Page 21 | PulseLinux