PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 22

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 22 / 44

  1. CVE-2021-38166kernel: integer overflow and out-of-bounds write in kernel/bpf/hashtab.c when many elements are placed in a single bucket
  2. CVE-2021-38165lynx: Disclosure of HTTP authentication credentials via SNI data
  3. CVE-2021-38160kernel: data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size in drivers/char/virtio_console.c
  4. CVE-2021-37972libjpeg-turbo: Out-of-bounds read in 64-bit SSE2 Huffman encoder
  5. CVE-2021-37789stb_image: heap-based buffer overflow
  6. CVE-2021-37750krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field
  7. CVE-2021-37714jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck
  8. CVE-2021-37712nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite
  9. CVE-2021-37701nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite
  10. CVE-2021-37623exiv2: DoS due to infinite loop in JpegBase::printStructure
  11. CVE-2021-37622exiv2: DoS due to infinite loop in JpegBase::printStructure
  12. CVE-2021-37621exiv2: DoS due to infinite loop in Image::printIFDStructure
  13. CVE-2021-37620exiv2: out-of-bounds read in XmpTextValue::read()
  14. CVE-2021-37619exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
  15. CVE-2021-37618exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure
  16. CVE-2021-37616exiv2: NULL pointer dereference in Exiv2::Internal::resolveLens0x8ff
  17. CVE-2021-37615exiv2: NULL pointer dereference in Exiv2::Internal::resolveLens0x319
  18. CVE-2021-37600util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c
  19. CVE-2021-37577bluez: Bluetooth Passkey Reflection Attack in Secure Pairing
  20. CVE-2021-37576kernel: powerpc: KVM guest OS users can cause host OS memory corruption
  21. CVE-2021-37533apache-commons-net: FTP client trusts the host from PASV response by default
  22. CVE-2021-37530transfig: Segfault in the open_stream function in readpics.c
  23. CVE-2021-37529transfig: Double-free via the free_stream function in readpics.c
  24. CVE-2021-37519memcached: Buffer Overflow vulnerability in authfile.c
  25. CVE-2021-37322binutils: use-after-free in c++filt in cplus-dem.c
  26. CVE-2021-37159kernel: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c
  27. CVE-2021-36980openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action
  28. CVE-2021-36978qpdf: heap-based buffer overflow in Pl_ASCII85Decoder::write() when a certain downstream write fails
  29. CVE-2021-36770perl-Encode: bug in local configuration loading allows arbitrary Perl code execution placed under the current working directory
  30. CVE-2021-36740varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request
  31. CVE-2021-36386fetchmail: DoS or information disclosure when logging long messages
  32. CVE-2021-36374ant: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats
  33. CVE-2021-36373ant: excessive memory allocation when reading a specially crafted TAR archive
  34. CVE-2021-36368openssh: possible bypass of fido 2 devices and ssh-askpass
  35. CVE-2021-36222krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS
  36. CVE-2021-36221golang: net/http/httputil: panic due to racy read of persistConn after handler panic
  37. CVE-2021-36217avahi: local DoS against avahi-daemon via D-Bus interface
  38. CVE-2021-36160httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path
  39. CVE-2021-36157cortex: Grafana Cortex directory traversal
  40. CVE-2021-36156loki: Path traversal in Grafana Loki
  41. CVE-2021-36090apache-commons-compress: excessive memory allocation when reading a specially crafted ZIP archive
  42. CVE-2021-36087libsepol: heap-based buffer overflow in ebitmap_match_any()
  43. CVE-2021-36086libsepol: use-after-free in cil_reset_classpermission()
  44. CVE-2021-36085libsepol: use-after-free in __cil_verify_classperms()
  45. CVE-2021-36084libsepol: use-after-free in __cil_verify_classperms()
  46. CVE-2021-35942glibc: Arbitrary read in wordexp()
  47. CVE-2021-35940apr: Regression of CVE-2017-12613 fix in apr 1.7
  48. CVE-2021-35939rpm: checks for unsafe symlinks are not performed for intermediary directories
  49. CVE-2021-35938rpm: races with chown/chmod/capabilities calls during installation
  50. CVE-2021-35937rpm: TOCTOU race in checks for unsafe symlinks
CVE 2021 document archive — Page 22 | PulseLinux