PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 38

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 38 / 44

  1. CVE-2021-3697grub2: Crafted JPEG image can lead to buffer underflow write in the heap
  2. CVE-2021-3696grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling
  3. CVE-2021-3695grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap
  4. CVE-2021-3688JBCS: URL normalization issue with dot-dot-semicolon(s) leads to information disclosure
  5. CVE-2021-3682QEMU: usbredir: free() call on invalid pointer in bufp_alloc()
  6. CVE-2021-3679kernel: DoS in rb_per_cpu_empty()
  7. CVE-2021-3677postgresql: memory disclosure in certain queries
  8. CVE-2021-3672c-ares: Missing input validation of host names may lead to domain hijacking
  9. CVE-2021-3671samba: Null pointer dereference on missing sname in TGS-REQ
  10. CVE-2021-3669kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts
  11. CVE-2021-3667libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API
  12. CVE-2021-3660cockpit: pages vulnerable to clickjacking
  13. CVE-2021-3659kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c
  14. CVE-2021-3658bluez: adapter incorrectly restores Discoverable state after powered down
  15. CVE-2021-3656kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE)
  16. CVE-2021-3655kernel: missing size validations on inbound SCTP packets
  17. CVE-2021-3653kernel: SVM nested virtualization issue in KVM (AVIC support)
  18. CVE-2021-3652389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
  19. CVE-2021-3648binutils: infinite loop while demangling rust symbols
  20. CVE-2021-3643sox: buffer overflow read vulnerability
  21. CVE-2021-3640kernel: use-after-free vulnerability in function sco_sock_sendmsg()
  22. CVE-2021-3639mod_auth_mellon: Open Redirect vulnerability in logout URLs
  23. CVE-2021-3638QEMU: ati-vga: inconsistent check in ati_2d_blt() may lead to out-of-bounds write
  24. CVE-2021-3635kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50
  25. CVE-2021-3634libssh: possible heap-based buffer overflow when rekeying
  26. CVE-2021-3631libvirt: Insecure sVirt label generation
  27. CVE-2021-3624dcraw: Buffer overflow caused by integer-overflow in foveon_load_camf()
  28. CVE-2021-3623libtpms: out-of-bounds access when trying to resume the state of the vTPM
  29. CVE-2021-3622hivex: stack overflow due to recursive call of _get_children()
  30. CVE-2021-3621sssd: shell command injection in sssctl
  31. CVE-2021-3618ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
  32. CVE-2021-3612kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP()
  33. CVE-2021-3611QEMU: intel-hda: segmentation fault due to stack overflow
  34. CVE-2021-3610ImageMagick: heap-based buffer overflow in ReadTIFFImage() in coders/tiff.c
  35. CVE-2021-3609kernel: race condition in net/can/bcm.c leads to local privilege escalation
  36. CVE-2021-3608QEMU: pvrdma: uninitialized memory unmap in pvrdma_ring_init()
  37. CVE-2021-3607QEMU: pvrdma: unchecked malloc size due to integer overflow in init_dev_ring()
  38. CVE-2021-3605OpenEXR: Heap buffer overflow in the rleUncompress function
  39. CVE-2021-3602buildah: Host environment variables leaked in build container when using chroot isolation
  40. CVE-2021-3601openssl: Certificate with CA:FALSE is accepted as valid CA cert
  41. CVE-2021-3600kernel: eBPF 32-bit source register truncation on div/mod
  42. CVE-2021-3598OpenEXR: Heap buffer overflow in Imf_3_1::CharPtrIO::readChars
  43. CVE-2021-3596ImageMagick: NULL pointer dereference in ReadSVGImage() in coders/svg.c
  44. CVE-2021-3595QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp)
  45. CVE-2021-3594QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp)
  46. CVE-2021-3593QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6)
  47. CVE-2021-3592QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp)
  48. CVE-2021-3588bluez: out-of-bounds read in cli_feat_read_cb() in src/gatt-database.c
  49. CVE-2021-3587kernel: nfc: Null pointer dereference in llcp_sock_getname
  50. CVE-2021-3582QEMU: pvrdma: unproperly mremap in pvrdma_map_to_pdir()
CVE 2021 document archive — Page 38 | PulseLinux