PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 33

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 33 / 44

  1. CVE-2021-21704php: security issues in pdo_firebase module
  2. CVE-2021-21703php: Local privilege escalation via PHP-FPM
  3. CVE-2021-21702php: NULL pointer dereference in SoapClient
  4. CVE-2021-21381flatpak: "file forwarding" feature can be used to gain unprivileged access to files
  5. CVE-2021-21351XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream
  6. CVE-2021-21350XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader
  7. CVE-2021-21349XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
  8. CVE-2021-21348XStream: ReDoS vulnerability
  9. CVE-2021-21347XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator
  10. CVE-2021-21346XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue
  11. CVE-2021-21345XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry
  12. CVE-2021-21344XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet
  13. CVE-2021-21343XStream: arbitrary file deletion on the local host via crafted input stream
  14. CVE-2021-21342XStream: SSRF via crafted input stream
  15. CVE-2021-21341XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream
  16. CVE-2021-21309redis: integer overflow when configurable limit for maximum supported bulk input size is too big on 32-bit platforms
  17. CVE-2021-21300git: remote code execution during clone operation on case-insensitive filesystems
  18. CVE-2021-21285docker: daemon crash during image pull of malicious image
  19. CVE-2021-21284docker: access to remapped root allows privilege escalation to real root
  20. CVE-2021-21261flatpak: sandbox escape via spawn portal
  21. CVE-2021-21240python-httplib2: Regular expression denial of service via malicious header
  22. CVE-2021-20718mod_auth_openidc: DoS in oidc_util_read_post_params() in util.c
  23. CVE-2021-20325httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5
  24. CVE-2021-20322kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets replies
  25. CVE-2021-20321kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename()
  26. CVE-2021-20320kernel: s390 eBPF JIT miscompilation issues fixes
  27. CVE-2021-20317kernel: timer tree corruption leads to missing wakeup and system freeze
  28. CVE-2021-20316samba: Symlink race error can allow metadata read and modify outside of the exported share
  29. CVE-2021-20315gnome-shell: locking protection bypass allow unauthorized user to kill existing applications or start new ones
  30. CVE-2021-20313ImageMagick: Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  31. CVE-2021-20312ImageMagick: Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  32. CVE-2021-20311ImageMagick: Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  33. CVE-2021-20310ImageMagick: Division by zero in ConvertXYZToJzazbz() of MagickCore/colorspace.c
  34. CVE-2021-20309ImagemMagick: Division by zero in WaveImage() of MagickCore/visual-effects.c
  35. CVE-2021-20305nettle: Out of bounds memory access in signature verification
  36. CVE-2021-20304OpenEXR: Undefined-shift in Imf_2_5::hufDecode
  37. CVE-2021-20303OpenEXR: Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer
  38. CVE-2021-20302OpenEXR: Floating-point-exception in Imf_2_5::precalculateTileInfot
  39. CVE-2021-20300OpenEXR: Integer-overflow in Imf_2_5::hufUncompress
  40. CVE-2021-20299OpenEXR: Null-dereference READ in Imf_2_5::Header::operator
  41. CVE-2021-20298OpenEXR: Out-of-memory in B44Compressor
  42. CVE-2021-20297NetworkManager: Profile with match.path setting triggers crash
  43. CVE-2021-20296OpenEXR: Segv on unknown address in Imf_2_5::hufUncompress - Null Pointer dereference
  44. CVE-2021-20295QEMU: Regression of CVE-2020-10756 fix in virt:rhel/qemu-kvm in Red Hat Enterprise Linux 8.3
  45. CVE-2021-20294binutils: stack buffer overflow WRITE may lead to a DoS via a crafted ELF
  46. CVE-2021-20293RESTEasy: PathParam in RESTEasy can lead to a reflected XSS attack
  47. CVE-2021-20292kernel: DRM Memory Management Double Free Privilege Escalation Vulnerability
  48. CVE-2021-20291containers/storage: DoS via malicious image
  49. CVE-2021-20289resteasy: Error message exposes endpoint class information
  50. CVE-2021-20288ceph: Unauthorized global_id reuse in cephx
CVE 2021 document archive — Page 33 | PulseLinux