PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 34

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 34 / 44

  1. CVE-2021-20286libnbd: Assertion failure in nbd_unlocked_opt_go in lib/opt.c
  2. CVE-2021-20284binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c
  3. CVE-2021-20277samba: Out of bounds read in AD DC LDAP server
  4. CVE-2021-20271rpm: Signature checks bypass via corrupted rpm package
  5. CVE-2021-20270python-pygments: Infinite loop in SML lexer may lead to DoS
  6. CVE-2021-20269kexec-tools: incorrect permissions on kdump dmesg file
  7. CVE-2021-20268kernel: eBPF Improper Input Validation
  8. CVE-2021-20266rpm: missing length checks in hdrblobInit()
  9. CVE-2021-20265kernel: increase slab leak leads to DoS
  10. CVE-2021-20263QEMU: virtiofsd: 'security.capabilities' is not dropped with xattrmap option
  11. CVE-2021-20261kernel: panic on multiple access to floppy device
  12. CVE-2021-20257QEMU: net: e1000: infinite loop while processing transmit descriptors
  13. CVE-2021-20255QEMU: net: eepro100: stack overflow via infinite recursion
  14. CVE-2021-20254samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token
  15. CVE-2021-20251samba: Race condition in the bad password lockout code
  16. CVE-2021-20248rpm: integer overflow in hdrblobVerifyRegion() in lib/header.c
  17. CVE-2021-20246ImageMagick: Division by zero in ScaleResampleFilter in MagickCore/resample.c
  18. CVE-2021-20245ImageMagick: Division by zero in WriteAnimatedWEBPImage() in coders/webp.c
  19. CVE-2021-20244ImageMagick: Division by zero in ImplodeImage in MagickCore/visual-effects.c
  20. CVE-2021-20243ImageMagick: Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  21. CVE-2021-20242ImageMagick: Division by zero in GenerateDifferentialNoise in MagickCore/gem.c
  22. CVE-2021-20241ImageMagick: Division by zero in WriteJP2Image() in coders/jp2.c
  23. CVE-2021-20240gdk-pixbuf: integer wraparound in the GIF loader of gdk-pixbuf via crafted input leads to segmentation fault
  24. CVE-2021-20239kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure
  25. CVE-2021-20233grub2: Heap out-of-bounds write due to miscalculation of space required for quoting
  26. CVE-2021-20232gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c
  27. CVE-2021-20231gnutls: Use after free in client key_share extension
  28. CVE-2021-20230stunnel: client certificate not correctly verified when redirect and verifyChain options are used
  29. CVE-2021-20229postgresql: single-column SELECT privilege enables reading all columns
  30. CVE-2021-20227sqlite: potential use-after-free bug when processing a subquery with both a correlated WHERE clause and a "HAVING 0" clause and where the parent query is an aggregate
  31. CVE-2021-20226kernel: use-after-free in io_uring feature
  32. CVE-2021-20225grub2: Heap out-of-bounds write in short form option parser
  33. CVE-2021-20224ImageMagick: integer overflow in ExportIndexQuantum() in MagickCore/quantum-export.c
  34. CVE-2021-20221qemu: out-of-bound heap buffer access via an interrupt ID field
  35. CVE-2021-20219kernel: improper synchronization in flush_to_ldisc() can lead to DoS
  36. CVE-2021-20208cifs-utils: Container can use kerberos cache from the host via mount.cifs/cifs.upcall
  37. CVE-2021-20206containernetworking-cni: Arbitrary path injection via type field in CNI configuration
  38. CVE-2021-20205libjpeg-turbo: DoS via open crafted GIF
  39. CVE-2021-20203qemu: Failed malloc in vmxnet3_activate_device() in hw/net/vmxnet3.c
  40. CVE-2021-20201spice: Client initiated renegotiation denial of service
  41. CVE-2021-20200kernel: close race between munmap() and expand_upwards()/downwards()
  42. CVE-2021-20199podman: Remote traffic to rootless containers is seen as orginating from localhost
  43. CVE-2021-20197binutils: Race window allows users to own arbitrary files
  44. CVE-2021-20196QEMU: block: fdc: null pointer dereference may lead to guest crash
  45. CVE-2021-20194kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt()
  46. CVE-2021-20193tar: Memory leak in read_header() in list.c
  47. CVE-2021-20190jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing
  48. CVE-2021-20189ImageMagick: processing crafted file leads to impact on availabiity
  49. CVE-2021-20188podman: container users permissions are not respected in privileged containers
  50. CVE-2021-20181qemu: 9pfs: TOCTOU privilege escalation vulnerability
CVE 2021 document archive — Page 34 | PulseLinux