Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20257 State: PUBLISHED Published: 2022-03-16T14:12:26 Last Updated: 2024-08-03T17:37:23.120Z Vendors: n/a Products: QEMU Problem Types: CWE-835 Description: An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/02/25/2 - https://lists.gnu.or
: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/02/25/2 - https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html - https://github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8 - https://bugzilla.redhat.com/show_bug.cgi?id=1930087 - https://security.netapp.com/advisory/ntap-20220425-0003/ - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-20258 State: REJECTED Published: 2022-08-25T17:22:58 Last Updated: 2022-08-25T17:22:58 Description: No description available.
CVE ID: CVE-2021-20259 State: PUBLISHED Published: 2021-06-07T20:31:37 Last Updated: 2024-08-03T17:37:23.017Z Vendors: n/a Products: foreman Problem Types: CWE-200 Description: A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Versions before foreman_fog_proxmox 0.13.1 are affected Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1932144
CVE ID: CVE-2021-20260 State: PUBLISHED Published: 2022-08-26T15:25:39 Last Updated: 2024-08-03T17:37:23.654Z Vendors: n/a Products: foreman Problem Types: CWE-200 Description: A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1932181 - https://access.redhat.com/security/cve/CVE-2021-20260
CVE ID: CVE-2021-20261 State: PUBLISHED Published: 2021-03-11T20:10:40 Last Updated: 2024-08-03T17:37:23.306Z Vendors: n/a Products: kernel Problem Types: CWE-362 Description: A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricted to root. If the permissions on the device have changed the impact changes greatly. In the default configuration root (or equivalent) permissions are required to attack this flaw. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cg
tack this flaw. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1932150 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a0c80efe5956ccce9fe7ae5c78542578c07bc20a
CVE ID: CVE-2021-20262 State: PUBLISHED Published: 2021-03-09T17:19:20 Last Updated: 2024-08-03T17:37:23.083Z Vendors: n/a Products: keycloak Problem Types: CWE-306 Description: A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1933639
CVE ID: CVE-2021-20263 State: PUBLISHED Published: 2021-03-09T17:17:43 Last Updated: 2024-08-03T17:37:23.570Z Vendors: n/a Products: QEMU Problem Types: CWE-281 Description: A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the 'security.capability' xattr in the guest to not drop on file write, potentially leading to a modified, privileged executable in the guest. In rare circumstances, this flaw could be used by a malicious user to elevate their privileges within the guest. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1933668 - https://www.openwall.com/lists/oss
rogram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1933668 - https://www.openwall.com/lists/oss-security/2021/03/08/1 - https://security.netapp.com/advisory/ntap-20210507-0002/ - https://security.gentoo.org/glsa/202208-27
CVE ID: CVE-2021-20264 State: PUBLISHED Published: 2021-10-06T15:12:05 Last Updated: 2024-08-03T17:37:23.455Z Vendors: n/a Products: containers/openjdk Problem Types: CWE-266 Description: An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1932283
CVE ID: CVE-2021-20265 State: PUBLISHED Published: 2021-03-10T15:30:18 Last Updated: 2024-08-03T17:37:23.202Z Vendors: n/a Products: kernel Problem Types: CWE-400 Description: A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1908827 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce19
ug.cgi?id=1908827 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce1920e9690c7842f8fa4b - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2021-20266 State: PUBLISHED Published: 2021-04-30T11:22:49 Last Updated: 2024-08-03T17:37:23.124Z Vendors: n/a Products: rpm Problem Types: CWE-125 Description: A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1927741 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/ - https://lists.fedoraproject.org/archives/list/package-announce
raproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/ - https://security.gentoo.org/glsa/202107-43
CVE ID: CVE-2021-20267 State: PUBLISHED Published: 2021-05-28T18:46:11 Last Updated: 2024-08-03T17:37:23.213Z Vendors: n/a Products: openstack-neutron Problem Types: CWE-345 Description: A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations. Only deployments using the Open vSwitch driver are affected. Source: OpenStack project. Versions before openstack-neutron 15.3.3, openstack-neutr
e Open vSwitch driver are affected. Source: OpenStack project. Versions before openstack-neutron 15.3.3, openstack-neutron 16.3.1 and openstack-neutron 17.1.1 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1934330 - https://security.openstack.org/ossa/OSSA-2021-001.html
CVE ID: CVE-2021-20268 State: PUBLISHED Published: 2021-03-09T17:16:14 Last Updated: 2024-08-03T17:37:23.275Z Vendors: n/a Products: kernel Problem Types: CWE-20 Description: An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1923816 - https://lore.kernel.or
tes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1923816 - https://lore.kernel.org/bpf/CACAyw99bEYWJCSGqfLiJ9Jp5YE1ZsZSiJxb4RFUTwbofipf0dA%40mail.gmail.com/T/#m8929643e99bea9c18ed490a7bc2591145eac6444 - https://security.netapp.com/advisory/ntap-20210409-0006/
CVE ID: CVE-2021-20269 State: PUBLISHED Published: 2022-03-09T16:29:47 Last Updated: 2024-08-03T17:37:23.203Z Vendors: n/a Products: kexec-tools Problem Types: CWE-276 Description: A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1934261
CVE ID: CVE-2021-20270 State: PUBLISHED Published: 2021-03-23T16:40:22 Last Updated: 2024-08-03T17:37:23.034Z Vendors: n/a Products: python-pygments Problem Types: CWE-835 Description: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1922136 - https://www.debian.org/security/2021/dsa-4889 - https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html - https://lists.debian.org/debian-lts-announce/
889 - https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html - https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2021-20271 State: PUBLISHED Published: 2021-03-26T00:00:00 Last Updated: 2024-08-03T17:37:23.716Z Vendors: n/a Products: rpm Problem Types: CWE-345 Description: A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1934125 - https://github.com/rpm-softwar
VE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1934125 - https://github.com/rpm-software-management/rpm/commit/d6a86b5e69e46cc283b1e06c92343319beb42e21 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/ - https://security.gentoo.org/glsa/202107-43 - https://www.starwindsoftware.com/security/sw-20220805-0002/
CVE ID: CVE-2021-20272 State: PUBLISHED Published: 2021-03-09T13:10:39 Last Updated: 2024-08-03T17:37:23.604Z Vendors: n/a Products: privoxy Problem Types: CWE-617 Description: A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1936651 - https://www.privoxy.org/announce.txt - https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20273 State: PUBLISHED Published: 2021-03-09T13:11:17 Last Updated: 2024-08-03T17:37:23.083Z Vendors: n/a Products: privoxy Problem Types: CWE-20 Description: A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/announce.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1936658 - https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20274 State: PUBLISHED Published: 2021-03-09T13:11:46 Last Updated: 2024-08-03T17:37:23.763Z Vendors: n/a Products: privoxy Problem Types: CWE-476 Description: A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/announce.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1936662 - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20275 State: PUBLISHED Published: 2021-03-09T13:12:05 Last Updated: 2024-08-03T17:37:23.667Z Vendors: n/a Products: privoxy Problem Types: CWE-119 Description: A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/announce.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1936666 - https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20276 State: PUBLISHED Published: 2021-03-09T13:12:35 Last Updated: 2024-08-03T17:37:23.654Z Vendors: n/a Products: privoxy Problem Types: CWE-119 Description: A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.privoxy.org/announce.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1936668 - https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html - https://security.gentoo.org/glsa/202107-16
CVE ID: CVE-2021-20277 State: PUBLISHED Published: 2021-05-12T13:54:05 Last Updated: 2024-08-03T17:37:24.134Z Vendors: n/a Products: samba Problem Types: CWE-125 Description: A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20210326-0007/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5J3B6PN5XMXF3OHYBNHDKZ3XFSUG
//lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5J3B6PN5XMXF3OHYBNHDKZ3XFSUGY4L/ - https://lists.debian.org/debian-lts-announce/2021/03/msg00036.html - https://www.debian.org/security/2021/dsa-4884 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXP3ONIY6MB4C5LDZV4YL5KJCES3UX24/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLZ74IF2N75VQSIHBL4B3P5WKWQCXSRY/ - https://bugzilla.redhat.com/show_bug.cgi?id=1941402 - https://www.samba.org/samba/security/CVE-2021-20277.html - https://security.gentoo.org/glsa/202105-22
CVE ID: CVE-2021-20278 State: PUBLISHED Published: 2021-05-28T10:42:40 Last Updated: 2024-08-03T17:37:23.663Z Vendors: n/a Products: kiali Problem Types: CWE-290 Description: An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying cluster. When OpenID `implicit flow` is used with RBAC turned off, this token validation doesn't occur, and this allows a malicious user to bypass the authentication. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1937171 - https
tional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1937171 - https://kiali.io/news/security-bulletins/kiali-security-002/
CVE ID: CVE-2021-20279 State: PUBLISHED Published: 2021-03-15T21:35:37 Last Updated: 2024-08-03T17:37:23.058Z Vendors: n/a Products: moodle Problem Types: CWE-79 Description: The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939033 - https://moodle.org/mod/forum/discuss.php?d=419650 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
ge/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/
CVE ID: CVE-2021-20280 State: PUBLISHED Published: 2021-03-15T21:35:44 Last Updated: 2024-08-03T17:37:23.661Z Vendors: n/a Products: moodle Problem Types: CWE-79 Description: Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939037 - https://moodle.org/mod/forum/discuss.php?d=419651 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.f
org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGOMHMYM3WICJ6D6U22Z6LPJGT5A6MZM/ - http://packetstormsecurity.com/files/164817/Moodle-Cross-Site-Scripting-Server-Side-Request-Forgery.html
CVE ID: CVE-2021-20281 State: PUBLISHED Published: 2021-03-15T21:35:50 Last Updated: 2024-08-03T17:37:23.634Z Vendors: n/a Products: moodle Problem Types: CWE-200 Description: It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939041 - https://moodle.org/mod/forum/discuss.php?d=419652 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list/package-a
ts.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/
CVE ID: CVE-2021-20282 State: PUBLISHED Published: 2021-03-15T21:35:56 Last Updated: 2024-08-03T17:37:23.596Z Vendors: n/a Products: moodle Problem Types: CWE-863 Description: When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939046 - https://moodle.org/mod/forum/discuss.php?d=419653 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list
unce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/
CVE ID: CVE-2021-20283 State: PUBLISHED Published: 2021-03-15T21:36:11 Last Updated: 2024-08-03T17:37:23.308Z Vendors: n/a Products: moodle Problem Types: CWE-863 Description: The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939051 - https://moodle.org/mod/forum/discuss.php?d=419654 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https
raproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/
CVE ID: CVE-2021-20284 State: PUBLISHED Published: 2021-03-26T16:39:03 Last Updated: 2024-08-03T17:37:23.579Z Vendors: n/a Products: binutils Problem Types: CWE-119 Description: A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=26931 - https://bugzilla.redhat.com/show_bug.cgi?id=1937784 - https://security.netapp.com/advisory/ntap-20210521-0010/ - https://security.gentoo.org
hat.com/show_bug.cgi?id=1937784 - https://security.netapp.com/advisory/ntap-20210521-0010/ - https://security.gentoo.org/glsa/202208-30
CVE ID: CVE-2021-20285 State: PUBLISHED Published: 2021-03-26T16:35:14 Last Updated: 2024-08-03T17:37:22.715Z Vendors: n/a Products: upx Problem Types: CWE-119 Description: A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/upx/upx/issues/421 - https://bugzilla.redhat.com/show_bug.cgi?id=1937787
CVE ID: CVE-2021-20286 State: PUBLISHED Published: 2021-03-15T17:38:46 Last Updated: 2024-08-03T17:37:23.639Z Vendors: n/a Products: libnbd Problem Types: CWE-617 Description: A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1934727 - https://gitlab.com/nbdkit/libnbd/-/commit/fb4440de9cc76e9c14bd3ddf3333e78621f40ad0