PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 36

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 36 / 44

  1. CVE-2021-4136vim: heap-based buffer overflow in eval_lambda() in src/eval.c
  2. CVE-2021-4135kernel: Heap information leak in map_lookup_elem function
  3. CVE-2021-4129Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
  4. CVE-2021-4127Mozilla: Angle graphics library out of date
  5. CVE-2021-4122cryptsetup: disable encryption via header rewrite
  6. CVE-2021-4115polkit: file descriptor leak allows an unprivileged user to cause a crash
  7. CVE-2021-4104log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender
  8. CVE-2021-4095kernel: KVM: NULL pointer dereference in kvm_dirty_ring_get() in virt/kvm/dirty_ring.c
  9. CVE-2021-4093kernel: KVM: SVM: out-of-bounds read/write in sev_es_string_io
  10. CVE-2021-4091389-ds-base: double free of the virtual attribute context in persistent search
  11. CVE-2021-4090kernel: Overflow of bmval[bmlen-1] in nfsd4_decode_bitmap function
  12. CVE-2021-4083kernel: fget: check that the fd still exists after getting a ref to it
  13. CVE-2021-4076tang: private key leak
  14. CVE-2021-4069vim: use-after-free in ex_open() in src/ex_docmd.c
  15. CVE-2021-4048lapack: Out-of-bounds read in *larrv
  16. CVE-2021-4047haproxy: Incomplete fix for CVE-2021-39242 in OpenShift 4.9
  17. CVE-2021-4044openssl: invalid handling of X509_verify_cert() internal errors in libssl
  18. CVE-2021-4037kernel: security regression for CVE-2018-13405
  19. CVE-2021-4034polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector
  20. CVE-2021-4032kernel: kvm: mishandling of memory error during VCPU construction can lead to DoS
  21. CVE-2021-4028kernel: use-after-free in RDMA listen()
  22. CVE-2021-4024podman: podman machine spawns gvproxy with port bound to all IPs
  23. CVE-2021-4023kernel: Improper IO-uring request cancellation operation allows local users to cause a crash
  24. CVE-2021-4019vim: heap-based buffer overflow in find_help_tags() in help.c
  25. CVE-2021-4011xorg-x11-server: SwapCreateRegister out-of-bounds access
  26. CVE-2021-4010xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access
  27. CVE-2021-4009xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access
  28. CVE-2021-4008xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access
  29. CVE-2021-4002kernel: possible leak or coruption of data residing on hugetlbfs
  30. CVE-2021-4001kernel: race condition when the EBPF map is frozen
  31. CVE-2021-3999glibc: Off-by-one buffer overflow/underflow in getcwd()
  32. CVE-2021-3998glibc: Unexpected return value from realpath() could leak data based on the application
  33. CVE-2021-3997systemd: Uncontrolled recursion in systemd-tmpfiles when removing files
  34. CVE-2021-3996util-linux: Unauthorized unmount of filesystems in libmount
  35. CVE-2021-3995util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid
  36. CVE-2021-3984vim: illegal memory access in find_start_brace() in cindent.c when C-indenting
  37. CVE-2021-3982gnome-shell: Distributions using CAP_SYS_NICE in gnome-shell may be exposed to privilege escalation
  38. CVE-2021-3981grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content
  39. CVE-2021-3979ceph: Ceph volume does not honour osd_dmcrypt_key_size
  40. CVE-2021-3975libvirt: segmentation fault during VM shutdown can lead to vdsm hang
  41. CVE-2021-3974vim: Use after free in regexp_nfa.c
  42. CVE-2021-3973vim: Heap based buffer overflow in findfile.c
  43. CVE-2021-3968vim: Heap use-after-free in ml_append_int function
  44. CVE-2021-3962ImageMagick: heap-use-after-free in at dcm.c RelinquishDCMMemory
  45. CVE-2021-3947QEMU: NVMe: out-of-bounds memory read in nvme_changed_nslist
  46. CVE-2021-3941openexr: Divide-by-zero in Imf_3_1::RGBtoXYZ
  47. CVE-2021-3933openexr: Integer-overflow in Imf_3_1::bytesPerDeepLineTable
  48. CVE-2021-3930QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c
  49. CVE-2021-3929QEMU: nvme: DMA reentrancy issue leads to use-after-free
  50. CVE-2021-3928vim: stack-based buffer overflow in spell_iswordp() in spell.c
CVE 2021 document archive — Page 36 | PulseLinux