CVE 2021 document archive · 28
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
2,160 documents · Identifier year 2021 · 28 / 44
- CVE-2021-29957Mozilla: Partial protection of inline OpenPGP message not indicated
- CVE-2021-29956Mozilla: Thunderbird stored OpenPGP secret keys without master password protection
- CVE-2021-29953Mozilla: Universal Cross-Site Scripting
- CVE-2021-29952Mozilla: Race condition in Web Render Components
- CVE-2021-29951Mozilla: Thunderbird Maintenance Service could have been started or stopped by domain users
- CVE-2021-29950Mozilla: Logic issue potentially leaves key material unlocked
- CVE-2021-29949Mozilla: Thunderbird might execute an alternative OTR library
- CVE-2021-29948Mozilla: Race condition when reading from disk while verifying signatures
- CVE-2021-29946Mozilla: Port blocking could be bypassed
- CVE-2021-29945Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads
- CVE-2021-29923golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet
- CVE-2021-29922rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string
- CVE-2021-29921python-ipaddress: Improper input validation of octal strings
- CVE-2021-29657kernel: KVM: double fetch in nested_svm_vmrun can lead to unrestricted MSR access
- CVE-2021-29650kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h may lead to DoS
- CVE-2021-29649kernel: memory leak in user mode driver due to lack of cleanup steps in kernel/usermode_driver.c and kernel/bpf/preload/bpf_preload_kern.c
- CVE-2021-29648kernel: DoS due to BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF
- CVE-2021-29647kernel: information disclosure due to uninitialized data structure in qrtr_recvmsg function in net/qrtr/qrtr.c
- CVE-2021-29646kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c
- CVE-2021-29623exiv2: Use of uninitialized memory in isWebPType() may lead to information leak
- CVE-2021-29505XStream: remote command execution attack by manipulating the processed input stream
- CVE-2021-29478redis: Integer overflow via COPY command for large intsets
- CVE-2021-29477redis: Integer overflow via STRALGO LCS command
- CVE-2021-29473exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
- CVE-2021-29470exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
- CVE-2021-29464exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header
- CVE-2021-29463exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata
- CVE-2021-29458exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode
- CVE-2021-29457exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
- CVE-2021-29425apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
- CVE-2021-29390libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c
- CVE-2021-29338openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c
- CVE-2021-29266kernel: use-after-free in drivers/vhost/vdpa.c because v->config_ctx has an invalid value upon re-opening a character device
- CVE-2021-29265kernel: race conditions in usbip_sockfd_store function in drivers/usb/usbip/stub_dev.c can lead to DoS
- CVE-2021-29264kernel: DoS due to negative fragment size calculation in drivers/net/ethernet/freescale/gianfar.c
- CVE-2021-29157dovecot: local attacker can login as any user and access their emails
- CVE-2021-29155kernel: protection for sequences of pointer arithmetic operations against speculatively out-of-bounds loads can be bypassed to leak content of kernel memory
- CVE-2021-29154kernel: Local privilege escalation due to incorrect BPF JIT branch displacement computation
- CVE-2021-28972kernel: Buffer overflow in hotplug/rpadlpar_sysfs.c
- CVE-2021-28971kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c
- CVE-2021-28965ruby: XML round-trip vulnerability in REXML
- CVE-2021-28964kernel: race condition in get_old_root function in fs/btrfs/ctree.c because of a lack of locking on an extent buffer before a cloning operation
- CVE-2021-28957python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS
- CVE-2021-28952kernel: buffer overflow in sound/soc/qcom/sdm845.c when an unexpected port ID number is encountered
- CVE-2021-28951kernel: DoS because of deadlock in fs/io_uring.c
- CVE-2021-28950kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode
- CVE-2021-28906libyang: NULL pointer dereference in read_yin_leaf()
- CVE-2021-28905libyang: reachable assertion in lys_node_free()
- CVE-2021-28904libyang: NULL pointer dereference in ext_get_plugin()
- CVE-2021-28903libyang: recursive call to lyxml_parse_mem() lead to crash