PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 32

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 32 / 44

  1. CVE-2021-23214postgresql: server processes unencrypted bytes from man-in-the-middle
  2. CVE-2021-23210sox: divide by zero in voc.c
  3. CVE-2021-23192samba: Subsequent DCE/RPC fragment injection vulnerability
  4. CVE-2021-23177libarchive: extracting a symlink with ACLs modifies ACLs of target
  5. CVE-2021-23172sox: heap overflow in hcom.c
  6. CVE-2021-23169OpenEXR: Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer
  7. CVE-2021-23159sox: heap based overflow in formats_i.c
  8. CVE-2021-23134kernel: use-after-free in nfc sockets
  9. CVE-2021-23133kernel: Race condition in sctp_destroy_sock list_del
  10. CVE-2021-23017nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name
  11. CVE-2021-22960llhttp: HTTP Request Smuggling when parsing the body of chunked requests
  12. CVE-2021-22959llhttp: HTTP Request Smuggling due to spaces in headers
  13. CVE-2021-22947curl: Server responses received before STARTTLS processed after TLS handshake
  14. CVE-2021-22946curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols
  15. CVE-2021-22945curl: use-after-free and double-free in MQTT sending
  16. CVE-2021-22940nodejs: Use-after-free on close http2 on stream canceling
  17. CVE-2021-22939nodejs: Incomplete validation of tls rejectUnauthorized parameter
  18. CVE-2021-22931nodejs: Improper handling of untypical characters in domain names
  19. CVE-2021-22930nodejs: Use-after-free on close http2 on stream canceling
  20. CVE-2021-22926curl: CURLOPT_SSLCERT mixup with Secure Transport
  21. CVE-2021-22925curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure
  22. CVE-2021-22924curl: Bad connection reuse due to flawed path name checks
  23. CVE-2021-22923curl: Metalink download sends credentials
  24. CVE-2021-22922curl: Content not matching hash in Metalink is not being discarded
  25. CVE-2021-22918libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes
  26. CVE-2021-22901curl: Use-after-free in TLS session handling when using OpenSSL TLS backend
  27. CVE-2021-22898curl: TELNET stack contents disclosure
  28. CVE-2021-22897curl: Cipher settings shared for all connections when using schannel TLS backed
  29. CVE-2021-22890curl: TLS 1.3 session ticket mix-up with HTTPS proxy host
  30. CVE-2021-22884nodejs: DNS rebinding in --inspect
  31. CVE-2021-22883nodejs: HTTP2 'unknownProtocol' cause DoS by resource exhaustion
  32. CVE-2021-22876curl: Leak of authentication credentials in URL via automatic Referer
  33. CVE-2021-22600kernel: double free in packet_set_ring() in net/packet/af_packet.c
  34. CVE-2021-22570protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference
  35. CVE-2021-22555kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c
  36. CVE-2021-22543kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks
  37. CVE-2021-22235wireshark: DNP dissector crash
  38. CVE-2021-22222wireshark: DVB-S2-BB dissector infinite loop
  39. CVE-2021-22207wireshark: MS-WSP dissector excessive memory consumption
  40. CVE-2021-22191wireshark: improper URL handling may lead to remote code execution
  41. CVE-2021-22174wireshark: USB HID dissector could crash
  42. CVE-2021-22173wireshark: USB HID dissector memory leak
  43. CVE-2021-21974OpenSLP: heap-overflow
  44. CVE-2021-21806webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution
  45. CVE-2021-21781kernel: arm: SIGPAGE information disclosure vulnerability
  46. CVE-2021-21779webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution
  47. CVE-2021-21775webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution
  48. CVE-2021-21708php: Use after free due to php_filter_float() failing for ints
  49. CVE-2021-21707php: Special character breaks path in xml parsing
  50. CVE-2021-21705php: SSRF bypass in FILTER_VALIDATE_URL
CVE 2021 document archive — Page 32 | PulseLinux