PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 26

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 26 / 44

  1. CVE-2021-32628redis: Integer overflow bug in the ziplist data structure
  2. CVE-2021-32627redis: Integer overflow issue with Streams
  3. CVE-2021-32626redis: Lua scripts can overflow the heap-based Lua stack
  4. CVE-2021-32625redis: Heap corruption via `STRALGO LCS` command (Incomplete fix for CVE-2021-29477)
  5. CVE-2021-32617exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
  6. CVE-2021-32610php-pear: Directory traversal vulnerability
  7. CVE-2021-32606kernel: isotp_setsockopt in net/can/isotp.c allows privilege escalation via use-after-free
  8. CVE-2021-32399kernel: race condition for removal of the HCI controller
  9. CVE-2021-32292json-c: stack-buffer-overflow in parseit() in json_parse.c
  10. CVE-2021-32280transfig: NULL pointer dereference in compute_closed_spline() in trans_spline.c
  11. CVE-2021-32256binutils: stack-overflow issue in demangle_type in rust-demangle.c.
  12. CVE-2021-32142LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp
  13. CVE-2021-32078kernel: out-of-bounds read in arch/arm/mach-footbridge/personal-pci.c due to improper input validation
  14. CVE-2021-32066ruby: StartTLS stripping vulnerability in Net::IMAP
  15. CVE-2021-32056cyrus-imapd: remote authenticated users could bypass intended access restrictions on certain server annotations
  16. CVE-2021-32055neomutt: Out of bounds read in IMAP parser
  17. CVE-2021-32029postgresql: Memory disclosure in partitioned-table UPDATE ... RETURNING
  18. CVE-2021-32028postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE
  19. CVE-2021-32027postgresql: Buffer overrun from integer overflow in array subscripting calculations
  20. CVE-2021-31957dotnet: ASP.NET Core Client Disconnect Denial of Service
  21. CVE-2021-31916kernel: out of bounds array access in drivers/md/dm-ioctl.c
  22. CVE-2021-31879wget: authorization header disclosure on redirect
  23. CVE-2021-31829kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content of kernel memory
  24. CVE-2021-31810ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host
  25. CVE-2021-31808squid: integer overflow in HTTP Range header
  26. CVE-2021-31807squid: incorrect memory management in HTTP Range header
  27. CVE-2021-31806squid: improper input validation in HTTP Range header
  28. CVE-2021-31799rubygem-rdoc: Command injection vulnerability in RDoc
  29. CVE-2021-31618httpd: NULL pointer dereference on specially crafted HTTP/2 request
  30. CVE-2021-31615bluetooth: Packet injection may lead to MITM or terminate existing link
  31. CVE-2021-31566libarchive: symbolic links incorrectly followed when changing modes, times, ACL and flags of a file while extracting an archive
  32. CVE-2021-31535libX11: missing request length checks
  33. CVE-2021-31525golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header
  34. CVE-2021-31440kernel: local escalation of privileges in handling of eBPF programs
  35. CVE-2021-31294redis: an assertion failure in a primary server by sending a non-administrative command
  36. CVE-2021-31292exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
  37. CVE-2021-31291exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp
  38. CVE-2021-31239sqlite: denial of service via the appendvfs.c function
  39. CVE-2021-31232cortex: Alertmanager can expose local files content via specially crafted config
  40. CVE-2021-31204dotnet: .NET Core single-file application privilege escalation
  41. CVE-2021-31162rust: double free in Vec::from_iter function if freeing the element panics
  42. CVE-2021-30984webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  43. CVE-2021-30954webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  44. CVE-2021-30953webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  45. CVE-2021-30952webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  46. CVE-2021-30951webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  47. CVE-2021-30936webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  48. CVE-2021-30934webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  49. CVE-2021-30897webkitgtk: Cross-origin data exfiltration via resource timing API
  50. CVE-2021-30890webkitgtk: Logic issue leading to universal cross-site scripting
CVE 2021 document archive — Page 26 | PulseLinux