PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 24

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 24 / 44

  1. CVE-2021-35550OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)
  2. CVE-2021-35546mysql: Server: Replication unspecified vulnerability (CPU Oct 2021)
  3. CVE-2021-35537mysql: Server: DML unspecified vulnerability (CPU Oct 2021)
  4. CVE-2021-35517apache-commons-compress: excessive memory allocation when reading a specially crafted TAR archive
  5. CVE-2021-35516apache-commons-compress: excessive memory allocation when reading a specially crafted 7Z archive
  6. CVE-2021-35515apache-commons-compress: infinite loop when reading a specially crafted 7Z archive
  7. CVE-2021-35477kernel: BPF program can obtain sensitive information from kernel memory via a speculative store bypass side-channel attack because the technique used by the BPF verifier to manage speculation is unreliable
  8. CVE-2021-35269ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT
  9. CVE-2021-35268ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode
  10. CVE-2021-35267ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections
  11. CVE-2021-35266ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname
  12. CVE-2021-35097snapdragon: authentication bypass
  13. CVE-2021-35065glob-parent: Regular Expression Denial of Service
  14. CVE-2021-35039kernel: allows loading unsigned kernel modules via init_module syscall
  15. CVE-2021-34981kernel: Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability
  16. CVE-2021-34866kernel: eBPF verification flaw
  17. CVE-2021-34798httpd: NULL pointer dereference via malformed requests
  18. CVE-2021-34693kernel: allows local users to obtain sensitive information from stack memory because of uninitialized data structure in net/can/bcm.c
  19. CVE-2021-34558golang: crypto/tls: certificate of wrong type is causing TLS client to panic
  20. CVE-2021-34556kernel: BPF program can obtain sensitive information from kernel memory via a speculative store bypass side-channel attack because of the possibility of uninitialized memory locations on the BPF stack
  21. CVE-2021-34552python-pillow: Buffer overflow in image convert function
  22. CVE-2021-34429jetty: crafted URIs allow bypassing security constraints
  23. CVE-2021-34428jetty: SessionListener can prevent a session from being invalidated breaking logout
  24. CVE-2021-34406kernel: Race condition in NVIDIA driver can lead to a null pointer dereference
  25. CVE-2021-34403kernel: NVIDIA Linux use after free in nvmap ioctl
  26. CVE-2021-34402kernel: NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC
  27. CVE-2021-34401kernel: NVIDIA driver improper access control may lead to code execution
  28. CVE-2021-34337mailman: password checking timing attack in administrative REST API
  29. CVE-2021-34335exiv2: DoS due to FPE in Exiv2::Internal::resolveLens0xffff
  30. CVE-2021-34334exiv2: Exiv2: Denial of Service via crafted image file
  31. CVE-2021-34193opensc: Stack overflow vulnerability in OpenSC smart card middleware
  32. CVE-2021-34183ImageMagick: memory leak in AcquireSemaphoreMemory() in semaphore.c and AcquireMagickMemory() in memory.c
  33. CVE-2021-34141numpy: incomplete string comparison in the numpy.core component
  34. CVE-2021-33938libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c
  35. CVE-2021-33930libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h
  36. CVE-2021-33929libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h
  37. CVE-2021-33928libsolv: heap-based buffer overflow in pool_installable() in src/repo.h
  38. CVE-2021-33910systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash
  39. CVE-2021-33909kernel: size_t-to-int conversion vulnerability in the filesystem layer
  40. CVE-2021-33844SoX: divide by zero crash in wav.c
  41. CVE-2021-33813jdom: XXE allows attackers to cause a DoS via a crafted HTTP request
  42. CVE-2021-33656kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds
  43. CVE-2021-33655kernel: malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory
  44. CVE-2021-33646libtar: memory leak found in th_read() function
  45. CVE-2021-33645libtar: memory leak found in th_read() function
  46. CVE-2021-33644libtar: out-of-bounds read in gnu_longname
  47. CVE-2021-33643libtar: out-of-bounds read in gnu_longlink
  48. CVE-2021-33642byacc: an infinite loop occurs in next_inline() of the more_curly() function
  49. CVE-2021-33641byacc: malloc incorrectly accessing released memory leads to use after free
  50. CVE-2021-33640libtar: fixes for CVE-2021-33645 and CVE-2021-33646 introduced new use-after-free bugs in libtar
CVE 2021 document archive — Page 24 | PulseLinux