cve.bz

redhat enterprise linux vulnerabilities, newest first, page 17

Filter
  1. 9.1CVE-2018-25013EPSS 2.1%

    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().

  2. 9.1CVE-2018-25012EPSS 2.1%

    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

  3. 9.8CVE-2018-25011EPSS 2.5%

    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

  4. 9.1CVE-2018-25010EPSS 2.2%

    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

  5. 9.1CVE-2018-25009EPSS 2.1%

    A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

  6. 5.7CVE-2021-3426EPSS 1.9%

    There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to …

  7. 8.6CVE-2021-3517EPSS 17%

    There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigg…

  8. 7.5CVE-2021-3445EPSS 1.1%

    A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system …

  9. 5.5CVE-2021-3421EPSS 0.6%

    A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest …

  10. 8.8CVE-2021-3518EPSS 22%

    There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidenti…

  11. 5.9CVE-2021-3537EPSS 3.6%

    A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the…

  12. 6.0CVE-2021-20221EPSS 0.3%

    An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory…

  13. 5.5CVE-2020-27824EPSS 1.6%

    A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerabil…

  14. 5.4CVE-2021-3504EPSS 1.8%

    A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to…

  15. 6.7CVE-2021-31916EPSS 0.7%

    An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privi…

  16. 6.1CVE-2021-3507EPSS 0.5%

    A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system.…

  17. 7.1CVE-2021-3501EPSS 0.4%

    A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highe…

  18. 6.8CVE-2021-20254EPSS 1.6%

    A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case wher…

  19. 7.8CVE-2021-3472EPSS 1.1%

    A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity a…

  20. 6.1CVE-2021-20208EPSS 0.7%

    A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality an…

  21. 5.5CVE-2021-3505EPSS 0.4%

    A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate(), whic…

  22. 7.8CVE-2021-3498EPSS 1.8%

    GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.

  23. 7.8CVE-2021-3497EPSS 1.2%

    GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.

  24. 6.5CVE-2021-3482EPSS 2.3%

    A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image cont…

  25. 4.0CVE-2021-3448EPSS 2.3%

    A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port use…

  26. 8.1CVE-2021-20305EPSS 1.7%

    A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range sca…

  27. 6.5CVE-2021-20291EPSS 1.6%

    A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an er…

  28. 4.3CVE-2021-3393EPSS 1.2%

    An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, m…

  29. 7.0CVE-2021-20271EPSS 0.8%

    A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM databa…

  30. 6.3CVE-2021-20197EPSS 0.3%

    There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating bin…

  31. 5.3CVE-2020-35518EPSS 1.5%

    When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

  32. 4.5CVE-2020-35508EPSS 0.2%

    A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to …

  33. 9.8CVE-2021-3466EPSS 8.7%

    A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat …

  34. 5.5CVE-2021-3446EPSS 0.1%

    A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of r…

  35. 5.5CVE-2021-3443EPSS 0.8%

    A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to cras…

  36. 5.7CVE-2021-3409EPSS 0.5%

    The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privil…

  37. 7.5CVE-2021-20270EPSS 2.8%

    An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

  38. 9.8CVE-2019-10196EPSS 1.4%

    A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all…

  39. 6.0CVE-2021-3416EPSS 0.5%

    A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process…

  40. 3.7CVE-2019-14850EPSS 1.6%

    A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work in initializing backend plugins, by simply opening a conne…

  41. 7.5CVE-2020-27827EPSS 3.2%

    A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this v…

  42. 2.7CVE-2021-20286EPSS 1.1%

    A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.

  43. 8.1CVE-2021-20179EPSS 1.2%

    A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerab…

  44. 9.8CVE-2021-20232EPSS 3.3%

    A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.

  45. 9.8CVE-2021-20231EPSS 3.6%

    A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.

  46. 6.4CVE-2021-20261EPSS 0.2%

    A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricte…

  47. 6.7CVE-2021-3411EPSS 0.4%

    A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a padding of int3 in the linking state. The highest threat from this vulnerability is to data confidentiality and integr…

  48. 7.8CVE-2020-35524EPSS 1.9%

    A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confiden…

  49. 7.8CVE-2020-35523EPSS 1.9%

    An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to…

  50. 5.5CVE-2020-35522EPSS 1.6%

    In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.