Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ate URL containing an embedded malicious redirect while using F-Secure Safe Browser for iOS. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33596
CVE ID: CVE-2021-33597 State: PUBLISHED Published: 2021-08-05T19:38:03 Last Updated: 2024-08-03T23:50:43.121Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: F-Secure Products: F-Secure endpoint protection products on Windows, Mac and Linux Security Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine. Additional Analyst Notes: - CVE Program Cont
ful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - https://www.f-secure.com/en/business/support-and-downloads/security-advisories
CVE ID: CVE-2021-33598 State: PUBLISHED Published: 2021-08-23T11:02:50 Last Updated: 2024-08-03T23:50:43.033Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: F-Secure Products: F-Secure endpoint protection products on Windows, Mac and Linux Security Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine. Additional Analyst Notes:
attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.f-secure.com/en/business/support-and-downloads/security-advisories/fsc-2021-33598
CVE ID: CVE-2021-33599 State: PUBLISHED Published: 2021-09-07T12:12:28 Last Updated: 2024-08-03T23:50:43.167Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: F-Secure Products: F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Atlant F-Secure Cloud Protection for Salesforce Problem Types: Denial of Service Vulnerability Description: A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner). The vulnerability can be exploit remotely by an attacker. A successful attac
finite loop and freezes AV engine scanner). The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33599
CVE ID: CVE-2021-33600 State: PUBLISHED Published: 2021-09-28T09:06:55 Last Updated: 2024-08-03T23:50:43.178Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: F-Secure Products: F-Secure Internet Gatekeeper Problem Types: Denial of Service Vulnerability in Web Interface of F-Secure Internet Gatekeeper Description: A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending a large username parameter. A successful exploitati
unauthenticated attacker could exploit this vulnerability by sending a large username parameter. A successful exploitation could lead to a denial-of-service of the product. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33600
CVE ID: CVE-2021-33601 State: PUBLISHED Published: 2021-09-28T09:08:33 Last Updated: 2024-08-03T23:50:43.181Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: F-Secure Products: F-Secure Internet Gatekeeper Problem Types: Arbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper Description: A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/busi
net Gatekeeper server. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33601
CVE ID: CVE-2021-33602 State: PUBLISHED Published: 2021-10-06T09:59:21 Last Updated: 2024-08-03T23:50:43.182Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Atlant & F-Secure Cloud Protection for Salesforce Problem Types: Denial of Service Vulnerability Description: A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression method), and this can crash the scanning engine. The vulnerability can be exploited remotely by an attacker. A succe
ion method), and this can crash the scanning engine. The vulnerability can be exploited remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories
CVE ID: CVE-2021-33603 State: PUBLISHED Published: 2021-10-08T09:45:10 Last Updated: 2024-08-03T23:50:43.162Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Atlant F-Secure Cloud Protection for Salesforce and Cloud Protection for Microsoft Office 365 Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be trig
PACK module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame - https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33603
CVE ID: CVE-2021-33604 State: PUBLISHED Published: 2021-06-24T11:16:27.149618Z Last Updated: 2024-09-17T03:13:22.641Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Vaadin Products: Vaadin, flow-server Problem Types: CWE-172 Description: URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser. Additional Analyst Notes: - CVE Program Container: References: - https://vaadin.com/security/cve-2021-33604 - https://github.com/vaadin/flow/pull/11099
CVE ID: CVE-2021-33605 State: PUBLISHED Published: 2021-08-25T12:12:41.760458Z Last Updated: 2024-09-17T02:53:05.351Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Vaadin Products: Vaadin, vaadin-checkbox-flow Problem Types: CWE-754 Description: Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prior to 3.0.0 (Vaadin 14.0.0 prior to 14.5.0), 3.0.0 through 4.0.1 (Vaadin 15.0.0 through 17.0.11), 14.5.0 through 14.6.7 (Vaadin 14.5.0 through 14.6.7), and 18.0.0 through 20.0.5 (Vaadin 18.0.0 through 20.0.5) allows attackers to modify the value of a disabled Checkbox inside ena
0.0 through 20.0.5 (Vaadin 18.0.0 through 20.0.5) allows attackers to modify the value of a disabled Checkbox inside enabled CheckboxGroup component via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://vaadin.com/security/cve-2021-33605 - https://github.com/vaadin/flow-components/pull/1903
CVE ID: CVE-2021-33609 State: PUBLISHED Published: 2021-10-13T10:58:35.736529Z Last Updated: 2024-09-16T21:04:18.638Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Vaadin Products: Vaadin, vaadin-server Problem Types: CWE-400 Description: Missing check in DataCommunicator class in com.vaadin:vaadin-server versions 8.0.0 through 8.14.0 (Vaadin 8.0.0 through 8.14.0) allows authenticated network attacker to cause heap exhaustion by requesting too many rows of data. Additional Analyst Notes: - CVE Program Container: References: - https://vaadin.com/security/cve-2021-33609 - https://github.com/vaadin/framework/pull/12415
CVE ID: CVE-2021-33611 State: PUBLISHED Published: 2021-11-02T10:06:56.037780Z Last Updated: 2024-09-17T02:32:32.326Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Vaadin Products: Vaadin, vaadin-menu-bar Problem Types: CWE-79 Description: Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allows remote attackers to execute malicious JavaScript in browser by opening crafted URL Additional Analyst Notes: - CVE Program Container: References: - https://vaadin.com/security/cve-2021-33611 - https://github.com/vaadin/vaadin-menu-bar/pull/126
CVE ID: CVE-2021-33615 State: PUBLISHED Published: 2022-06-02T12:32:07 Last Updated: 2024-08-03T23:58:21.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures - https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0027/MNDT-2022-0027.md
CVE ID: CVE-2021-33616 State: PUBLISHED Published: 2022-04-04T11:51:06 Last Updated: 2024-08-03T23:58:21.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) allows stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures - https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories - https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0020/MNDT-2022-0020.md
CVE ID: CVE-2021-33617 State: PUBLISHED Published: 2021-07-31T16:55:50 Last Updated: 2024-08-03T23:58:21.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response (to a failed login request) is null only when the username is invalid. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/passwordmanagerpro/release-notes.html#pmp11200 - https://herolab.usd.de/security-advisories/usd-2021-0015/
CVE ID: CVE-2021-33618 State: PUBLISHED Published: 2021-11-10T22:40:41 Last Updated: 2024-08-03T23:58:21.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY element to the user-management feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/releases - https://trovent.io/security-advisory-2105-02 - https://trovent.github.io/security-advisories/TRSA-2105-02/TRSA-2105-02.txt - http://seclists.org/fulldisclosure/2021/Nov/38
CVE ID: CVE-2021-33620 State: PUBLISHED Published: 2021-05-28T00:00:00 Last Updated: 2024-08-03T23:58:21.468Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/squid-cache/squid/security/advisories/GHSA-572g-rvwr-6c7f - http://www.squid-cache.org/Versions/v5/cha
ttps://github.com/squid-cache/squid/security/advisories/GHSA-572g-rvwr-6c7f - http://www.squid-cache.org/Versions/v5/changesets/squid-5-8af775ed98bfd610f9ce762fe177e01b2675588c.patch - http://www.squid-cache.org/Versions/v4/changesets/squid-4-1e05a85bd28c22c9ca5d3ac9f5e86d6269ec0a8c.patch - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQ3U54ZCNXR44QRPW3AV2VCS6K3TKCF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4EPIWUZDJAXADDHVOPKRBTQHPBR6H66/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00014.html - http://www.openwall.com/lists/oss-security/2023/10/11/3 - http://seclists
rg/debian-lts-announce/2021/06/msg00014.html - http://www.openwall.com/lists/oss-security/2023/10/11/3 - http://seclists.org/fulldisclosure/2023/Oct/14
CVE ID: CVE-2021-33621 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-11-04T16:09:15.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object. Additional Analyst Notes: - CVE Program Container: References: - https://www.ruby-lang.org/en/news/2022/11/22/http-response-splitting-in-cgi-cve-2021-33621/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQR7LWED6VAPD5ATYOBZIGJQ
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQR7LWED6VAPD5ATYOBZIGJQPCUBRJBX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YACE6ORF2QBXXBK2V2CM36D7TZMEJVAS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THVTYHHEOVLQFCFHWURZYO7PVUPBHRZD/ - https://security.netapp.com/advisory/ntap-20221228-0004/ - https://lists.debian.org/debian-lts-announce/2023/06/msg00012.html - https://security.gentoo.org/glsa/202401-27
CVE ID: CVE-2021-33622 State: PUBLISHED Published: 2021-06-15T18:59:24 Last Updated: 2024-08-03T23:58:21.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/sylabs - https://support.sylabs.io/support/solutions/articles/42000087130-3-5-8-security-release-cve-2021-33622-
CVE ID: CVE-2021-33623 State: PUBLISHED Published: 2021-05-28T00:00:00 Last Updated: 2024-08-03T23:58:21.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/trim-newlines - https://github.com/sindresorhus/trim-newlines/releases/tag/v4.0.1 - https://security.netapp.com/advisory/ntap-20210702-0007/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00033.html
CVE ID: CVE-2021-33624 State: PUBLISHED Published: 2021-06-23T15:37:09.000Z Last Updated: 2025-11-11T15:19:19.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/conference/usenixsecurity21/presentation/kirzner - http://www.openwall.com/lists/oss-security/2021/06/21/1 - https://github.com/torvalds/linux/commit/9183671af6dbf60a1219371d4ed73e23f4
enwall.com/lists/oss-security/2021/06/21/1 - https://github.com/torvalds/linux/commit/9183671af6dbf60a1219371d4ed73e23f43b49db - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html - https://github.com/benschlueter/CVE-2021-33624
CVE ID: CVE-2021-33625 State: PUBLISHED Published: 2022-02-03T01:55:10.000Z Last Updated: 2025-11-04T19:12:29.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022014 - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf - https://sec
www.insyde.com/security-pledge/SA-2022014 - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf - https://security.netapp.com/advisory/ntap-20220222-0004/
CVE ID: CVE-2021-33626 State: PUBLISHED Published: 2021-10-01T02:21:29.000Z Last Updated: 2025-11-04T19:12:30.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2021001 - https://security.netapp.com/advisory/ntap-20220216-0006/ - https
e - https://www.insyde.com/security-pledge/SA-2021001 - https://security.netapp.com/advisory/ntap-20220216-0006/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2021-33627 State: PUBLISHED Published: 2022-02-03T01:30:36.000Z Last Updated: 2025-11-04T19:12:32.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11 affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - h
l addresses. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022022 - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf - https://security.netapp.com/advisory/ntap-20220222-0002/
CVE ID: CVE-2021-33629 State: PUBLISHED Published: 2021-07-26T14:46:50 Last Updated: 2024-08-03T23:58:21.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data. Additional Analyst Notes: - CVE Program Container: References: - https://openeuler.org/zh/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1265
CVE ID: CVE-2021-33630 State: PUBLISHED Published: 2024-01-18T15:00:49.312Z Last Updated: 2025-05-07T20:14:53.453Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: openEuler Products: kernel Problem Types: CWE-476 Description: NULL Pointer Dereference vulnerability in openEuler kernel on Linux (network modules) allows Pointer Manipulation. This vulnerability is associated with program files net/sched/sch_cbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-103
DP Vulnrichment: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 - https://gitee.com/src-openeuler/kernel/pulls/1389 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e8b9bfa110896f95d602d8c98d5f9d67e41d78c - http://www.openwall.com/lists/oss-security/2024/01/30/3 - http://www.openwall.com/lists/oss-security/2024/01/30/4 - http://www.openwall.com/lists/oss-security/2024/01/30/5 - http://www.openwall.com/lists/oss-security/2024/01/30/9 - http://www.openwall.com/lists/oss-security/2024/01/30/10 - http://www.openwall
all.com/lists/oss-security/2024/01/30/9 - http://www.openwall.com/lists/oss-security/2024/01/30/10 - http://www.openwall.com/lists/oss-security/2024/01/31/3 - http://www.openwall.com/lists/oss-security/2024/01/31/2 - http://www.openwall.com/lists/oss-security/2024/02/02/6 - http://www.openwall.com/lists/oss-security/2024/02/02/9 - http://www.openwall.com/lists/oss-security/2024/02/03/1 - https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE ID: CVE-2021-33631 State: PUBLISHED Published: 2024-01-18T15:05:58.610Z Last Updated: 2025-02-13T16:28:21.561Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: openEuler Products: kernel Problem Types: CWE-190 Description: Integer Overflow or Wraparound vulnerability in openEuler kernel on Linux (filesystem modules) allows Forced Integer Overflow.This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3, from 5.10.0-60.18.0 before 5.10.0-183.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - https://www.ope