PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 37

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 37 / 44

  1. CVE-2021-3927vim: heap-based buffer overflow in gchar_cursor() in misc1.c
  2. CVE-2021-3923kernel: stack information leak in infiniband RDMA
  3. CVE-2021-3918nodejs-json-schema: Prototype pollution vulnerability
  4. CVE-2021-3917coreos-installer: restrict access permissions on /boot/ignition{,/config.ign}
  5. CVE-2021-3905openvswitch: External triggered memory leak in Open vSwitch while processing fragmented packets
  6. CVE-2021-3894kernel: sctp: local DoS: unprivileged user can cause BUG()
  7. CVE-2021-3892kernel: memory leak in fib6_rule_suppress could result in DoS
  8. CVE-2021-3875vim: heap-based buffer overflow
  9. CVE-2021-3872vim: heap-based buffer overflow in win_redr_status() in drawscreen.c
  10. CVE-2021-3864kernel: descendant's dumpable setting with certain SUID binaries
  11. CVE-2021-3847kernel: low-privileged user privileges escalation
  12. CVE-2021-3839DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash
  13. CVE-2021-3826libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c
  14. CVE-2021-3807nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes
  15. CVE-2021-3802udisks2: insecure defaults in user-accessible mount helpers allow for a DoS
  16. CVE-2021-3800glib2: Possible privilege escalation thourgh pkexec and aliases
  17. CVE-2021-3798openCryptoki: Soft token does not check if an EC key is valid
  18. CVE-2021-3796vim: use-after-free in nv_replace() in normal.c
  19. CVE-2021-3782wayland: libwayland-server wl_shm reference-count overflow
  20. CVE-2021-3781ghostscript: sandbox escape using '%pipe%'
  21. CVE-2021-3778vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c
  22. CVE-2021-3773kernel: lack of port sanity checking in natd and netfilter leads to exploit of OpenVPN clients
  23. CVE-2021-3772kernel: sctp: Invalid chunks may be used to remotely remove existing associations
  24. CVE-2021-3770vim: using retab with large value may lead to heap buffer overflow
  25. CVE-2021-3765validator: Inefficient Regular Expression Complexity in Validator.js
  26. CVE-2021-3764kernel: DoS in ccp_run_aes_gcm_cmd() function
  27. CVE-2021-3760kernel: nfc: Use-After-Free vulnerability of ndev->rf_conn_info object
  28. CVE-2021-3759kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks
  29. CVE-2021-3753kernel: a race out-of-bound read in vt
  30. CVE-2021-3752kernel: possible use-after-free in bluetooth module
  31. CVE-2021-3750QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free
  32. CVE-2021-3748QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu
  33. CVE-2021-3746libtpms: out-of-bounds access via specially crafted TPM 2 command packets
  34. CVE-2021-3744kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
  35. CVE-2021-3743kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c
  36. CVE-2021-3739kernel: null-ptr-dereference bug in btrfs_rm_device in fs/btrfs/volumes.c
  37. CVE-2021-3738samba: Use after free in Samba AD DC RPC server
  38. CVE-2021-3737python: urllib: HTTP client possible infinite loop on a 100 Continue response
  39. CVE-2021-3736kernel: uninitialized kernel stack may lead to information disclosure
  40. CVE-2021-3735QEMU: ahci: deadlock issue leads to denial of service
  41. CVE-2021-3733python: urllib: Regular expression DoS in AbstractBasicAuthHandler
  42. CVE-2021-3732kernel: overlayfs: Mounting overlayfs inside an unprivileged user namespace can reveal files
  43. CVE-2021-3716nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  44. CVE-2021-3715kernel: use-after-free in route4_change() in net/sched/cls_route.c
  45. CVE-2021-3714kernel: Remote Page Deduplication Attacks
  46. CVE-2021-3713QEMU: out-of-bounds write in UAS (USB Attached SCSI) device emulation
  47. CVE-2021-3712openssl: Read buffer overruns processing ASN.1 strings
  48. CVE-2021-3711openssl: SM2 Decryption Buffer Overflow
  49. CVE-2021-3700usbredir: use-after-free in usbredirparser_serialize() in usbredirparser/usbredirparser.c
  50. CVE-2021-3698cockpit: authenticates with revoked certificates
CVE 2021 document archive — Page 37 | PulseLinux