Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38136 State: PUBLISHED Published: 2021-08-06T14:06:16 Last Updated: 2024-08-04T01:37:14.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/get_snapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host. Additional Analyst Notes: - CVE Program Container: References: - https://www.corero.com/blog/data-sheets-corero-securewatch-managed-services/ - https://www.shielder.it/advisories/corero_secure_watch_managed_services-get_snapshot-path-traversal/
CVE ID: CVE-2021-38137 State: PUBLISHED Published: 2021-08-06T14:01:30 Last Updated: 2024-08-04T01:37:15.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role. Additional Analyst Notes: - CVE Program Container: References: - https://www.corero.com/blog/data-sheets-corero-securewatch-managed-services/ - https://www.shielder.it/advisories/corero_secure_watch_managed_services-multiple-broken-access-control/
CVE ID: CVE-2021-38138 State: PUBLISHED Published: 2021-08-05T15:59:00 Last Updated: 2024-08-04T01:37:14.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helloxz/onenav/issues/26 - https://github.com/helloxz/onenav/releases - http://packetstormsecurity.com/files/163753/OneNav-Beta-0.9.12-Cross-Site-Scripting.html
CVE ID: CVE-2021-38140 State: PUBLISHED Published: 2021-08-10T18:00:43 Last Updated: 2024-08-04T01:37:14.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1 - https://github.com/pgaudit/set_user/releases/tag/REL2_0_1
CVE ID: CVE-2021-38142 State: PUBLISHED Published: 2021-09-07T17:18:22 Last Updated: 2024-08-04T01:37:15.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network can achieve remote code execution on any computer that tries to update Windows Sender due to the fact that the upgrade mechanism is not secured (is not protected with TLS). Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/support/cms - https://www.barco.com/en/support/software/R33050099?majorVersion=2&minorVersion=5&patchVersion=3&buildVersion=65
CVE ID: CVE-2021-38143 State: PUBLISHED Published: 2021-08-31T04:05:12 Last Updated: 2024-08-04T01:37:15.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when the admin tries to see the client list. This type of XSS (stored) can lead to the extraction of the PHPSESSID cookie belonging to the admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.formtools.org/
kie belonging to the admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.formtools.org/ - https://github.com/formtools/core - https://bernardofsr.github.io/blog/2021/form-tools/ - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md
CVE ID: CVE-2021-38144 State: PUBLISHED Published: 2021-08-31T04:06:18 Last Updated: 2024-08-04T01:37:15.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submission_id parameter, e.g., clients/forms/edit_submission.php?form_id=1&view_id=1&submission_id=[XSS]. Additional Analyst Notes: - CVE Program Container: References: - https://www.formtools.org/ - https://github.com/formtools/core - https://bernardofsr.github.io/blog/2021/form-tools/ - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md
CVE ID: CVE-2021-38145 State: PUBLISHED Published: 2021-08-31T04:03:48 Last Updated: 2024-08-04T01:37:15.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Form Tools through 3.0.20. SQL Injection can occur via the export_group_id field when a low-privileged user (client) tries to export a form with data, e.g., manipulation of modules/export_manager/export.php?export_group_id=1&export_group_1_results=all&export_type_id=1. Additional Analyst Notes: - CVE Program Container: References: - https://www.formtools.org/ - https://github.com/formtools/core/ - https://bernardofsr.github.io/blog/2021/form-tools/ - https://github.com/bernardofsr/CVEs-With-PoC/blob
ormtools/core/ - https://bernardofsr.github.io/blog/2021/form-tools/ - https://github.com/bernardofsr/CVEs-With-PoC/blob/main/PoCs/Form%20Tools/README.md
CVE ID: CVE-2021-38146 State: PUBLISHED Published: 2021-11-22T08:34:58 Last Updated: 2024-08-04T01:37:15.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. Additional Analyst Notes: - CVE Program Container: References: - https://www.wipro.com/holmes/ - http://packetstormsecurity.com/files/164970/Wipro-Holmes-Orchestrator-20.4.1-Arbitrary-File-Download.html
CVE ID: CVE-2021-38147 State: PUBLISHED Published: 2021-11-29T07:42:23 Last Updated: 2024-08-04T01:37:15.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/Domain_Credential_Report_Excel, processexecution/DownloadExcelFile/User_Report_Excel, processexecution/DownloadExcelFile/Process_Report_Excel, processexecution/DownloadExcelFile/Infrastructure_Report_Excel, or processexecution/DownloadExcelFile/Resolver_Report_Excel. Additional Anal
nloadExcelFile/Infrastructure_Report_Excel, or processexecution/DownloadExcelFile/Resolver_Report_Excel. Additional Analyst Notes: - CVE Program Container: References: - https://www.wipro.com/holmes/ - http://packetstormsecurity.com/files/165039/Wipro-Holmes-Orchestrator-20.4.1-Report-Disclosure.html
CVE ID: CVE-2021-38148 State: PUBLISHED Published: 2021-08-07T02:28:49 Last Updated: 2024-08-04T01:37:14.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs. Additional Analyst Notes: - CVE Program Container: References: - https://forum.obsidian.md/t/obsidian-release-v0-12-12/21564
CVE ID: CVE-2021-38149 State: PUBLISHED Published: 2021-08-06T11:50:11 Last Updated: 2024-08-04T01:37:15.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://chikitsa.net/ - https://github.com/jboogie15/CVE-2021-38149
CVE ID: CVE-2021-38150 State: PUBLISHED Published: 2021-09-14T11:14:59 Last Updated: 2024-08-04T01:37:16.044Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: SAP SE Products: SAP Business Client Problem Types: Information Disclosure Description: When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid. Additional Analyst Notes: - CVE Program Container: References: -
esponding backend for which the credentials are valid. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3060621 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405
CVE ID: CVE-2021-38151 State: PUBLISHED Published: 2021-08-06T11:50:28 Last Updated: 2024-08-04T01:37:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://chikitsa.net/ - https://github.com/jboogie15/CVE-2021-38149
CVE ID: CVE-2021-38152 State: PUBLISHED Published: 2021-08-06T11:50:40 Last Updated: 2024-08-04T01:37:14.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://chikitsa.net/ - https://github.com/jboogie15/CVE-2021-38149 - http://packetstormsecurity.com/files/163816/Chikitsa-2.0.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-38153 State: PUBLISHED Published: 2021-09-22T09:05:11 Last Updated: 2024-08-04T01:37:15.929Z Vendors: Apache Software Foundation Products: Apache Kafka Problem Types: CWE-203 Description: Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been fixed. The affected versions include Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, and 2.8.0. Additional A
.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, and 2.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://kafka.apache.org/cve-list - https://lists.apache.org/thread.html/r35322aec467ddae34002690edaa4d9f16e7df9b5bf7164869b75b62c%40%3Cdev.kafka.apache.org%3E - https://lists.apache.org/thread.html/r45cc0602d5f2cbb72e48896dfadf5e5b87ed85630449598b40e8f0be%40%3Cdev.kafka.apache.org%3E - https://lists.apache.org/thread.html/r45cc0602d5f2cbb72e48896dfadf5e5b87ed85630449598b40e8f0be%40%3Cusers.kafka.apache.org%3E - https://lists.apache.org/thread.html/rd9ef217b09fdefaf32a4e1835b59b96629542db57e1f63edb8b006e6%40%3Cusers.kafka
org%3E - https://lists.apache.org/thread.html/rd9ef217b09fdefaf32a4e1835b59b96629542db57e1f63edb8b006e6%40%3Cusers.kafka.apache.org%3E - https://lists.apache.org/thread.html/rd9ef217b09fdefaf32a4e1835b59b96629542db57e1f63edb8b006e6%40%3Cdev.kafka.apache.org%3E - https://lists.apache.org/thread.html/r26390c8b09ecfa356582d665b0c01f4cdcf16ac047c85f9f9f06a88c%40%3Cusers.kafka.apache.org%3E - https://lists.apache.org/thread.html/r26390c8b09ecfa356582d665b0c01f4cdcf16ac047c85f9f9f06a88c%40%3Cdev.kafka.apache.org%3E - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-38154 State: PUBLISHED Published: 2021-08-29T04:59:18 Last Updated: 2024-08-04T01:37:16.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For example, an incoming FAX may be sent through e-mail to the attacker. This occurs when a PIN is not required for General User Mode, as exploited in the wild in August 2021. Additional Analyst Notes: - CVE Program Container: Referenc
General User Mode, as exploited in the wild in August 2021. Additional Analyst Notes: - CVE Program Container: References: - https://www.usa.canon.com/internet/portal/us/home/support/product-advisories - https://protocolpolice.nl/CVE-2021-38154_Protocol_Police_Catwalk_Alert
CVE ID: CVE-2021-38155 State: PUBLISHED Published: 2021-08-06T00:00:00 Last Updated: 2024-08-04T01:37:16.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). By guessing the name of an account and failing to authenticate multiple times, any unauthenticated actor could both confirm the account exists and obtain that account's corresponding UUID, which might be leveraged for other unrelated attacks. All deployments enabling security_compliance.lockout_failure_attempts are affected. Addit
d for other unrelated attacks. All deployments enabling security_compliance.lockout_failure_attempts are affected. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1688137 - https://security.openstack.org/ossa/OSSA-2021-003.html - http://www.openwall.com/lists/oss-security/2021/08/10/5 - https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html
CVE ID: CVE-2021-38156 State: PUBLISHED Published: 2021-09-15T13:20:49 Last Updated: 2024-08-04T01:37:15.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://raxis.com/blog/cve-2021-38156
CVE ID: CVE-2021-38157 State: PUBLISHED Published: 2021-08-06T20:58:13 Last Updated: 2024-08-04T01:37:16.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://dgccpa.com - https://leostream.com - https://www.leostream.com/resources-2/product-lifecycle/ - https://gist.github.com/erud1te-sec/5c85924cb78ba85af42e0b7b62a5ec91
CVE ID: CVE-2021-38159 State: PUBLISHED Published: 2021-08-07T16:05:08 Last Updated: 2024-08-04T01:37:16.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the MOVEit Transfer web application could allow an unauthenticated remote attacker to gain access to the database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, or execute SQL statements that alter or delete database elements, via crafted strings sent to unique MOVEit Transfer transaction types. The
ments that alter or delete database elements, via crafted strings sent to unique MOVEit Transfer transaction types. The fixed versions are 2019.0.8 (11.0.8), 2019.1.7 (11.1.7), 2019.2.4 (11.2.4), 2020.0.7 (12.0.7), 2020.1.6 (12.1.6), and 2021.0.4 (13.0.4). Additional Analyst Notes: - CVE Program Container: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-Vulnerability-August-6-2021
CVE ID: CVE-2021-38160 State: PUBLISHED Published: 2021-08-07T03:31:12 Last Updated: 2024-08-04T01:37:16.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely for robustness in the face of anomalous host OS behavior Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/d00d8da5869a2608e97cfede094dfc5e
Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/d00d8da5869a2608e97cfede094dfc5e11462a46 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4 - https://access.redhat.com/security/cve/cve-2021-38160 - https://security.netapp.com/advisory/ntap-20210902-0010/ - https://www.debian.org/security/2021/dsa-4978 - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
CVE ID: CVE-2021-38161 State: PUBLISHED Published: 2021-11-03T15:20:24 Last Updated: 2024-08-04T01:37:15.519Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-287 Description: Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164 - https://www.debian.org/security/2022/dsa-5153
CVE ID: CVE-2021-38162 State: PUBLISHED Published: 2021-09-14T11:15:37 Last Updated: 2024-08-04T01:37:15.668Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: SAP SE Products: SAP Web Dispatcher Problem Types: CWE-444 Description: SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7.49, 7.53, 7.77, 7.81, 7.83 processes allow an unauthenticated attacker to submit a malicious crafted request over a network to a front-end server which may, over several attempts, result in a back-end server confusing the boundaries of malicious and legitimate messages. This can result in the bac
s, result in a back-end server confusing the boundaries of malicious and legitimate messages. This can result in the back-end server executing a malicious payload which can be used to read or modify any information on the server or consume server resources making it temporarily unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 - https://launchpad.support.sap.com/#/notes/3080567 - http://seclists.org/fulldisclosure/2022/May/3 - http://packetstormsecurity.com/files/166964/SAP-Web-Dispatcher-HTTP-Request-Smuggling.html
CVE ID: CVE-2021-38163 State: PUBLISHED Published: 2021-09-14T11:21:36.000Z Last Updated: 2025-10-21T23:25:33.764Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver (Visual Composer 7.0 RT) Problem Types: Unrestricted File Upload Description: SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of running operating system commands with the privilege of the Java Server process. These commands can be used to read or modify any information on the se
ds with the privilege of the Java Server process. These commands can be used to read or modify any information on the server or shut the server down making it unavailable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 - https://launchpad.support.sap.com/#/notes/3084487
CVE ID: CVE-2021-38164 State: PUBLISHED Published: 2021-09-14T11:19:00 Last Updated: 2024-08-04T01:37:16.113Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SAP SE Products: SAP ERP Financial Accounting (RFOPENPOSTING_FR) Problem Types: CWE-862 Description: SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered attacker to invoke certain functions that would otherwise be restricted to specific users. These functions are normally exposed over the network and once exploited the attacker may be able to v
o specific users. These functions are normally exposed over the network and once exploited the attacker may be able to view and modify financial accounting data that only a specific user should have access to. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 - https://launchpad.support.sap.com/#/notes/3068582
CVE ID: CVE-2021-38165 State: PUBLISHED Published: 2021-08-07T17:33:54 Last Updated: 2024-08-04T01:37:16.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/991971 - https://www.openwall.com/lists/oss-security/2021/08/07/1 - https://lynx.invisible-island.net/current/CHANGES.html - https://github.com/w3c/libwww/blob/f010b4cc58d32f34b162f0084fe093f7097a61f0/Library/src/HTParse.c#L118 - http://www.openwall.com/lists/oss-security/20
blob/f010b4cc58d32f34b162f0084fe093f7097a61f0/Library/src/HTParse.c#L118 - http://www.openwall.com/lists/oss-security/2021/08/07/9 - https://www.openwall.com/lists/oss-security/2021/08/07/11 - http://www.openwall.com/lists/oss-security/2021/08/07/12 - http://www.openwall.com/lists/oss-security/2021/08/07/11 - https://lists.debian.org/debian-lts-announce/2021/08/msg00010.html - https://www.debian.org/security/2021/dsa-4953 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VKNK7GQBJBUBMJVNKVC7RTCYWUYMFJQW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6PZF7JNTFCOJ62HXZG4Q2NEHSZ6IO2V/ - https:
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6PZF7JNTFCOJ62HXZG4Q2NEHSZ6IO2V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7YMUHFJJWTZ6HBHTYXVDPNZINGGURHDW/
CVE ID: CVE-2021-38166 State: PUBLISHED Published: 2021-08-07T17:50:52 Last Updated: 2024-08-04T01:37:16.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu%40gmail.com/ - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=c4eb1f403243fc7bbb7de644db8587c03de36da6 - https://lists.fedoraproject.org
b/scm/linux/kernel/git/bpf/bpf.git/commit/?id=c4eb1f403243fc7bbb7de644db8587c03de36da6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUVLBJKZMWA3E3YXSH4SZ7BOYGJP4GXP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UL6CH5M5PRLMA3KPBX4LPUO6Z73GRISO/ - https://security.netapp.com/advisory/ntap-20210909-0001/ - https://www.debian.org/security/2021/dsa-4978