cve.bz

fedoraproject fedora vulnerabilities, newest first, page 44

Filter
  1. 7.8CVE-2021-28701EPSS 0.3%

    Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, …

  2. 7.5CVE-2020-19752EPSS 1.6%

    The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.

  3. 7.8CVE-2021-39254EPSS 0.4%

    A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTFS-3G < 2021.8.22.

  4. 7.8CVE-2021-39253EPSS 0.4%

    A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.

  5. 7.8CVE-2021-39252EPSS 0.4%

    A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.

  6. 7.8CVE-2021-39251EPSS 0.4%

    A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.

  7. 7.8CVE-2021-35267EPSS 0.5%

    NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root.

  8. 7.8CVE-2021-35266EPSS 0.5%

    In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution.

  9. 7.8CVE-2021-33287EPSS 0.4%

    In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application.

  10. 7.8CVE-2021-35269EPSS 0.5%

    NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_setup_flag, a heap buffer overflow can occur allowing for code execution and escalation of privileges.

  11. 7.8CVE-2021-35268EPSS 0.5%

    In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a heap buffer overflow can occur allowing for code execution and escalation of privileges.

  12. 7.8CVE-2021-33289EPSS 0.5%

    In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overflow can occur and allow for code execution.

  13. 7.8CVE-2021-33285EPSS 0.4%

    In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is cause…

  14. 5.9CVE-2021-40530EPSS 1.2%

    The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator …

  15. 5.9CVE-2021-40529EPSS 1.5%

    The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined …

  16. 7.8CVE-2021-3770EPSS 0.7%

    vim is vulnerable to Heap-based Buffer Overflow

  17. 8.8CVE-2021-30624EPSS 4.1%

    Chromium: CVE-2021-30624 Use after free in Autofill

  18. 8.8CVE-2021-30623EPSS 4.0%

    Chromium: CVE-2021-30623 Use after free in Bookmarks

  19. 8.8CVE-2021-30622EPSS 4.1%

    Chromium: CVE-2021-30622 Use after free in WebApp Installs

  20. 6.5CVE-2021-30621EPSS 3.5%

    Chromium: CVE-2021-30621 UI Spoofing in Autofill

  21. 8.8CVE-2021-30620EPSS 4.1%

    Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink

  22. 6.5CVE-2021-30619EPSS 3.5%

    Chromium: CVE-2021-30619 UI Spoofing in Autofill

  23. 8.8CVE-2021-30618EPSS 4.1%

    Chromium: CVE-2021-30618 Inappropriate implementation in DevTools

  24. 6.5CVE-2021-30617EPSS 3.7%

    Chromium: CVE-2021-30617 Policy bypass in Blink

  25. 8.8CVE-2021-30616EPSS 4.1%

    Chromium: CVE-2021-30616 Use after free in Media

  26. 6.5CVE-2021-30615EPSS 5.6%

    Chromium: CVE-2021-30615 Cross-origin data leak in Navigation

  27. 8.8CVE-2021-30614EPSS 4.5%

    Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip

  28. 8.8CVE-2021-30613EPSS 4.1%

    Chromium: CVE-2021-30613 Use after free in Base internals

  29. 8.8CVE-2021-30612EPSS 2.8%

    Chromium: CVE-2021-30612 Use after free in WebRTC

  30. 8.8CVE-2021-30611EPSS 2.8%

    Chromium: CVE-2021-30611 Use after free in WebRTC

  31. 8.8CVE-2021-30610EPSS 4.1%

    Chromium: CVE-2021-30610 Use after free in Extensions API

  32. 8.8CVE-2021-30609EPSS 4.1%

    Chromium: CVE-2021-30609 Use after free in Sign-In

  33. 8.8CVE-2021-30608EPSS 4.1%

    Chromium: CVE-2021-30608 Use after free in Web Share

  34. 8.8CVE-2021-30607EPSS 4.1%

    Chromium: CVE-2021-30607 Use after free in Permissions

  35. 8.8CVE-2021-30606EPSS 4.1%

    Chromium: CVE-2021-30606 Use after free in Blink

  36. 7.5CVE-2021-23437EPSS 3.2%

    The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.

  37. 6.1CVE-2021-39191EPSS 1.7%

    mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-par…

  38. 7.0CVE-2021-40490EPSS 0.3%

    A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

  39. 7.5CVE-2021-33582EPSS 3.1%

    Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes s…

  40. 6.5CVE-2021-3634EPSS 4.7%

    A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the …

  41. 3.1CVE-2021-39164EPSS 1.5%

    Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) of a room if they know the ID of the room…

  42. 3.1CVE-2021-39163EPSS 0.9%

    Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, avatar, topic and number of members of a room if they know the ID of the room. This vulner…

  43. 5.3CVE-2021-34434EPSS 1.3%

    In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are …

  44. 5.9CVE-2021-39272EPSS 0.9%

    Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.

  45. 4.9CVE-2021-28700EPSS 1.9%

    xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allow a domain to allocate memor…

  46. 5.5CVE-2021-28699EPSS 0.4%

    inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has two tables. As a result, guests also need to be able to retri…

  47. 5.5CVE-2021-28698EPSS 0.3%

    long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain action…

  48. 7.8CVE-2021-28697EPSS 0.3%

    grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant tab…

  49. 6.8CVE-2021-28696EPSS 0.4%

    IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which shoul…

  50. 6.8CVE-2021-28695EPSS 0.4%

    IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which shoul…