CVE 2021 document archive · 35
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
2,160 documents · Identifier year 2021 · 35 / 44
- CVE-2021-20179pki-core: Unprivileged users can renew any certificate
- CVE-2021-20177kernel: iptables string match rule could result in kernel panic
- CVE-2021-20176ImageMagick: processing crafted file leads to division by zero
- CVE-2021-20095python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code
- CVE-2021-4460kernel: Linux kernel: integer overflow and information disclosure via undefined shift operation in drm/amdkfd
- CVE-2021-4454kernel: can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
- CVE-2021-4453kernel: drm/amd/pm: fix a potential gpu_metrics_table memory leak
- CVE-2021-4442kernel: tcp: add sanity tests to TCP_QUEUE_SEQ
- CVE-2021-4441kernel: spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()
- CVE-2021-4440kernel: x86/xen: Drop USERGS_SYSRET64 paravirt call
- CVE-2021-4439kernel: isdn: cpai: check ctr->cnr to avoid array index out of bound
- CVE-2021-4231angular: XSS vulnerability
- CVE-2021-4219imagemagick: remote DoS in MagicCore/draw.c via crafted SVG file
- CVE-2021-4218kernel: sysctl parameter read causes kernel panic ( rpcrdma module )
- CVE-2021-4217unzip: Null pointer dereference in Unicode strings code
- CVE-2021-4214libpng: hardcoded value leads to heap-overflow
- CVE-2021-4213JSS: memory leak in TLS connection leads to OOM
- CVE-2021-4209GnuTLS: Null pointer dereference in MD_UPDATE
- CVE-2021-4207QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow
- CVE-2021-4206QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow
- CVE-2021-4204kernel: improper input validation may lead to privilege escalation
- CVE-2021-4203kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses
- CVE-2021-4202kernel: Race condition in nci_request() leads to use after free while the device is getting removed
- CVE-2021-4197kernel: cgroup: Use open-time creds and namespace for migration perm checks
- CVE-2021-4193vim: out-of-bound read in getvcol()
- CVE-2021-4192vim: use-after-free in win_linetabsize()
- CVE-2021-4190wireshark: Kafka dissector infinite loop
- CVE-2021-4189python: ftplib should not use the host from the PASV response
- CVE-2021-4187vim: use-after-free vulnerability
- CVE-2021-4186wireshark: Gryphon dissector crash
- CVE-2021-4185wireshark: RTMPT dissector infinite loop
- CVE-2021-4184wireshark: BitTorrent DHT dissector infinite loop
- CVE-2021-4183wireshark: pcapng file parser crash
- CVE-2021-4182wireshark: RFC 7468 file parser infinite loop
- CVE-2021-4181wireshark: Sysdig Event dissector crash
- CVE-2021-4173vim: use-after-free with nested :def function
- CVE-2021-4166vim: out-of-bounds read in do_arg_all() in src/arglist.c
- CVE-2021-4160openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure
- CVE-2021-4159kernel: another kernel ptr leak vulnerability via BPF in coerce_reg_to_size
- CVE-2021-4158QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c
- CVE-2021-4157kernel: Buffer overwrite in decode_nfs_fh function
- CVE-2021-4156libsndfile: heap out-of-bounds read in src/flac.c in flac_buffer_copy
- CVE-2021-4155kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL
- CVE-2021-4154kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout
- CVE-2021-4150kernel: Block subsystem mishandles reference counts
- CVE-2021-4149kernel: Improper lock operation in btrfs
- CVE-2021-4148kernel: Improper implementation of block_invalidatepage() allows users to crash the kernel
- CVE-2021-4147libvirt: deadlock and crash in libxl driver
- CVE-2021-4145QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in block/mirror.c
- CVE-2021-4140Mozilla: Iframe sandbox bypass with XSLT