PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 39

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 39 / 44

  1. CVE-2021-3580nettle: Remote crash in RSA decryption via manipulated ciphertext
  2. CVE-2021-3575openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution
  3. CVE-2021-3574ImageMagick: memory leaks with convert command
  4. CVE-2021-3573kernel: use-after-free in function hci_sock_bound_ioctl()
  5. CVE-2021-3572python-pip: Incorrect handling of unicode separators in git references
  6. CVE-2021-3571linuxptp: wrong length of one-step follow-up in transparent clock
  7. CVE-2021-3570linuxptp: missing length check of forwarded messages
  8. CVE-2021-3569libtpms: stack corruption bug in RSA decryption
  9. CVE-2021-3567caribou: segfault on pressing ē since Xorg CVE-2020-25712 fix
  10. CVE-2021-3565tpm2-tools: fixed AES wrapping key in tpm2_import
  11. CVE-2021-3564kernel: double free in bluetooth subsystem when the HCI device initialization fails
  12. CVE-2021-3561fig2dev: Global buffer overflow in fig2dev/read.c in function read_objects
  13. CVE-2021-3560polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync()
  14. CVE-2021-3559libvirt: nodedev-list command may cause libvirt to crash on hosts with GRID driver installed
  15. CVE-2021-3551pki-server: Dogtag installer "pkispawn" logs admin credentials into a world-readable log file
  16. CVE-2021-3549binutils: heap-based buffer overflow in avr_elf32_load_records_from_section() via large section parameter
  17. CVE-2021-3546QEMU: vhost-user-gpu: out-of-bounds write in virgl_cmd_get_capset()
  18. CVE-2021-3545QEMU: vhost-user-gpu: information disclosure due to uninitialized memory read
  19. CVE-2021-3544QEMU: vhost-user-gpu: multiple memory leaks
  20. CVE-2021-3543kernel: nitro_enclaves stale file descriptors on failed usercopy
  21. CVE-2021-3541libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms
  22. CVE-2021-3537libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode
  23. CVE-2021-3531ceph: RGW unauthenticated denial of service
  24. CVE-2021-3530binutils: stack memory exhaustion in demangle_path() in rust-demangle.c
  25. CVE-2021-3527QEMU: usb: unbounded stack allocation in usbredir
  26. CVE-2021-3524gateway: radosgw: CRLF injection
  27. CVE-2021-3522gstreamer-plugins-base: out-of-bounds read when handling certain ID3v2 tags
  28. CVE-2021-3521rpm: RPM does not require subkeys to have a valid binding signature
  29. CVE-2021-3520lz4: memory corruption due to an integer overflow bug caused by memmove argument
  30. CVE-2021-3518libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c
  31. CVE-2021-3517libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c
  32. CVE-2021-3516libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c
  33. CVE-2021-3514389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()
  34. CVE-2021-3509ceph-dashboard: Cross-site scripting via token Cookie
  35. CVE-2021-3507QEMU: fdc: heap buffer overflow in DMA read data transfers
  36. CVE-2021-3506kernel: Out of bounds memory access bug in get_next_net_page() in fs/f2fs/node.c
  37. CVE-2021-3505libtpms: RSA keys weaker than expected
  38. CVE-2021-3504hivex: Buffer overflow when provided invalid node key length
  39. CVE-2021-3502avahi: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames
  40. CVE-2021-3501kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32 GB from vcpu->run
  41. CVE-2021-3498gstreamer-plugins-good: Heap corruption in matroska demuxing
  42. CVE-2021-3497gstreamer-plugins-good: Use-after-free in matroska demuxing
  43. CVE-2021-3493kernel: overlayfs file system caps privilege escalation
  44. CVE-2021-3492kernel: shiftfs file system double free vulnerability
  45. CVE-2021-3491kernel: Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass
  46. CVE-2021-3490kernel: Linux kernel eBPF bitwise ops ALU32 bounds tracking
  47. CVE-2021-3489kernel: Linux kernel eBPF RINGBUF map oversized allocation
  48. CVE-2021-3487binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()
  49. CVE-2021-3483kernel: use-after-free in nosy driver in nosy_ioctl() in drivers/firewire/nosy.c when a device is added twice
  50. CVE-2021-3482exiv2: Heap-based buffer overflow in Jp2Image::readMetadata()
CVE 2021 document archive — Page 39 | PulseLinux