PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 30

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 30 / 44

  1. CVE-2021-27861Kernel: Layer 2 network filtering capabilities bypass with invalid length (and optionally VLAN0 headers)
  2. CVE-2021-27854kernel: layer 2 network filtering capabilities bypass / wifi
  3. CVE-2021-27853kernel: layer 2 network filtering capabilities bypass
  4. CVE-2021-27815libexif: NULL Pointer Deference may lead to DoS by uploading a malicious JPEG file
  5. CVE-2021-27803wpa_supplicant: Use-after-free in P2P provision discovery processing
  6. CVE-2021-27645glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c
  7. CVE-2021-27365kernel: heap buffer overflow in the iSCSI subsystem
  8. CVE-2021-27364kernel: out-of-bounds read in libiscsi module
  9. CVE-2021-27363kernel: iscsi: unrestricted access to sessions and handles
  10. CVE-2021-27358grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call
  11. CVE-2021-27291python-pygments: ReDoS in multiple lexers
  12. CVE-2021-27290nodejs-ssri: Regular expression DoS (ReDoS) when parsing malicious SRI in strict mode
  13. CVE-2021-27219glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits
  14. CVE-2021-27218glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform
  15. CVE-2021-27212openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function
  16. CVE-2021-27135xterm: crash when processing combining characters
  17. CVE-2021-26945OpenEXR: Integer-overflow in bool Imf_2_5::readDeepTile
  18. CVE-2021-26937screen: crash when processing combining chars
  19. CVE-2021-26927jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c
  20. CVE-2021-26926jasper: Out of bounds read in jp2_decode() in jp2_dec.c
  21. CVE-2021-26708kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c
  22. CVE-2021-26701dotnet: System.Text.Encodings.Web Remote Code Execution
  23. CVE-2021-26691httpd: mod_session: Heap overflow via a crafted SessionHeader value
  24. CVE-2021-26690httpd: mod_session: NULL pointer dereference when parsing Cookie header
  25. CVE-2021-26423dotnet: ASP.NET Core WebSocket frame processing DoS
  26. CVE-2021-26401hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715
  27. CVE-2021-26393hw: amd: Insufficient memory cleanup in ASP Trusted Execution Environment (TEE) may poison process contents
  28. CVE-2021-26392hw: amd: Insufficient verification in 'LoadModule' may lead to an out-of-bounds write
  29. CVE-2021-26391hw: amd: Insufficient verification of header signature may lead to unwanted code execution problem
  30. CVE-2021-26360hw: amd: Unauthorized modifications of the security configuration of the SOC registers
  31. CVE-2021-26346hw: amd: integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service
  32. CVE-2021-26341hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch
  33. CVE-2021-26316hw: amd: arbitrary code execution in bios due to a fault in communication buffer
  34. CVE-2021-26291maven: Block repositories using http by default
  35. CVE-2021-26260OpenEXR: Integer-overflow in Imf_2_5::DwaCompressor::initializeBuffers
  36. CVE-2021-25786qpdf: Heap use after free in Pl_ASCII85Decoder::write
  37. CVE-2021-25636libreoffice: Incorrect trust validation of signature with ambiguous KeyInfo children
  38. CVE-2021-25635libreoffice: Content Manipulation with Certificate Validation Attack
  39. CVE-2021-25634libreoffice: Timestamp Manipulation with Signature Wrapping
  40. CVE-2021-25633libreoffice: Content Manipulation with Double Certificate Attack
  41. CVE-2021-25329tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)
  42. CVE-2021-25321arpwatch: Local privilege escalation from runtime user to root
  43. CVE-2021-25317cups: insecure permissions of /var/log/cups allows for symlink attacks
  44. CVE-2021-25293python-pillow: Out-of-bounds read in SGI RLE image reader
  45. CVE-2021-25292python-pillow: Regular expression DoS in PDF format parser
  46. CVE-2021-25291python-pillow: out-of-bounds read in TiffReadRGBATile in TiffDecode.c
  47. CVE-2021-25290python-pillow: Negative-offset memcpy in TIFF image reader
  48. CVE-2021-25289python-pillow: insufficent fix for CVE-2020-35654 due to incorrect error checking in TiffDecode.c
  49. CVE-2021-25288python-pillow: Out-of-bounds read in J2K image reader
  50. CVE-2021-25287python-pillow: Out-of-bounds read in J2K image reader