PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2021 document archive · 40

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,160 documents · Identifier year 2021 · 40 / 44

  1. CVE-2021-3481qt: Out of bounds read in function QRadialFetchSimd from crafted svg file
  2. CVE-2021-3480slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  3. CVE-2021-3479OpenEXR: Out-of-memory caused by allocation of a very large buffer
  4. CVE-2021-3478OpenEXR: Out-of-memory in ScanLineInputFile
  5. CVE-2021-3477OpenEXR: Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  6. CVE-2021-3476OpenEXR: Undefined-shift in Imf_2_5::unpack14
  7. CVE-2021-3475OpenEXR: Integer-overflow in Imf_2_5::calculateNumTiles
  8. CVE-2021-3474OpenEXR: Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  9. CVE-2021-3472xorg-x11-server: XChangeFeedbackControl integer underflow leads to privilege escalation
  10. CVE-2021-3470redis: potential heap overflow when using a heap allocator other than jemalloc or glibc's malloc
  11. CVE-2021-3468avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket
  12. CVE-2021-3467jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c
  13. CVE-2021-3466libmicrohttpd: Buffer overflow issue in URL parser in the post_process_urlencoded function
  14. CVE-2021-3450openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT
  15. CVE-2021-3449openssl: NULL pointer dereference in signature_algorithms processing
  16. CVE-2021-3448dnsmasq: fixed outgoing port used when --server is used with an interface name
  17. CVE-2021-3446libtpms: return of wrong initialization vector when certain symmetric ciphers are used
  18. CVE-2021-3445libdnf: Signature verification bypass via signature placed in the main RPM header
  19. CVE-2021-3444kernel: bpf verifier incorrect mod32 truncation
  20. CVE-2021-3443jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c
  21. CVE-2021-3429cloud-init: randomly generated passwords logged in clear-text to world-readable file
  22. CVE-2021-3428kernel: integer overflow in ext4_es_cache_extent
  23. CVE-2021-3426python: Information disclosure via pydoc
  24. CVE-2021-3421rpm: unsigned signature header leads to string injection into an rpm database
  25. CVE-2021-3418grub2: grub 2.05 reintroduced CVE-2020-15705
  26. CVE-2021-3416QEMU: net: Infinite loop in loopback mode may lead to stack overflow
  27. CVE-2021-3411kernel: broken KRETPROBES reports corruption of .text section while running a FTRACE stress tester
  28. CVE-2021-3409QEMU: sdhci: incomplete fix for CVE-2020-17380/CVE-2020-25085
  29. CVE-2021-3408grub2: heap out-of-bound write due to mis-calculation of space required for quoting
  30. CVE-2021-3393postgresql: Partition constraint violation errors leak values of denied columns
  31. CVE-2021-3392QEMU: scsi: mptsas: use-after-free while processing io requests
  32. CVE-2021-3349evolution-data-server: mail is shown as having a valid signature from an unknown identifier on a previously trusted key
  33. CVE-2021-3348kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c
  34. CVE-2021-3347kernel: Use after free via PI futex state
  35. CVE-2021-3345libgcrypt: Heap buffer overflow in the block buffer management code
  36. CVE-2021-3326glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters
  37. CVE-2021-3272jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c
  38. CVE-2021-3246libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution
  39. CVE-2021-3236vim: NULL pointer dereference in ex_buffer_all method
  40. CVE-2021-3200libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c
  41. CVE-2021-3185gstreamer: buffer overflow in gst_h264_slice_parse_dec_ref_pic_marking
  42. CVE-2021-3181mutt: Memory leak when parsing rfc822 group addresses
  43. CVE-2021-3178kernel: path traversal in fs/nfsd/nfs3xdr.c may lead to Information Disclosure or RCE
  44. CVE-2021-3177python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c
  45. CVE-2021-3156sudo: Heap buffer overflow in argument parsing
  46. CVE-2021-3115golang: cmd/go: packages using cgo can cause arbitrary code execution at build time
  47. CVE-2021-3114golang: crypto/elliptic: incorrect operations on the P-224 curve
  48. CVE-2021-2481mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2021)
  49. CVE-2021-2479mysql: Server: DML unspecified vulnerability (CPU Oct 2021)
  50. CVE-2021-2478mysql: Server: DML unspecified vulnerability (CPU Oct 2021)
CVE 2021 document archive — Page 40 | PulseLinux