Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64. Additional Analyst Notes: - CVE Program Container: References: - https://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf - https://support.lenovo.com/us/en/product_security/
/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf - https://support.lenovo.com/us/en/product_security/LEN-68054 - https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797
CVE ID: CVE-2021-3676 State: REJECTED Published: 2022-05-31T15:12:14 Last Updated: 2022-05-31T15:12:14 Description: No description available.
CVE ID: CVE-2021-3677 State: PUBLISHED Published: 2022-03-02T00:00:00 Last Updated: 2024-08-03T17:01:08.004Z Vendors: n/a Products: postgresql Problem Types: CWE-200 Description: A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgres
ay be independent of that setting. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/support/security/CVE-2021-3677/ - https://bugzilla.redhat.com/show_bug.cgi?id=2001857 - https://security.netapp.com/advisory/ntap-20220407-0008/ - https://security.gentoo.org/glsa/202211-04
CVE ID: CVE-2021-3678 State: PUBLISHED Published: 2021-08-04T13:14:29 Last Updated: 2024-08-03T17:01:07.691Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-338 Description: showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f9a9defd-29ea-4442-b692-ff1512813de4 - https://github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370
CVE ID: CVE-2021-3679 State: PUBLISHED Published: 2021-08-05T19:54:42 Last Updated: 2024-08-03T17:01:08.334Z Vendors: n/a Products: kernel Problem Types: CWE-400 Description: A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1989165 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f0d6d9883c13174669f88adac
i?id=1989165 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f0d6d9883c13174669f88adac4f0ee656cc16a - https://www.debian.org/security/2021/dsa-4978 - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
CVE ID: CVE-2021-3680 State: PUBLISHED Published: 2021-08-04T12:50:47 Last Updated: 2024-08-03T17:01:08.348Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-325 Description: showdoc is vulnerable to Missing Cryptographic Step Additional Analyst Notes: - CVE Program Container: References: - https://github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370 - https://huntr.dev/bounties/76b49607-fba9-4100-9be7-cb459fe6cfe2
CVE ID: CVE-2021-3681 State: PUBLISHED Published: 2022-04-18T16:20:37 Last Updated: 2024-08-03T17:01:07.697Z Vendors: n/a Products: ansible Problem Types: CWE-522 Description: A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the ``build_ignore`` list in "galaxy.yml" include files in the ``.tar.gz`` file. This contains sensitive info, such as the user's Ansible Galaxy API key and any secrets in ``ansible`` or ``ansible-playbook`` verbose output without the``no_log`` redaction. Currently, there is no way to deprecate a Collection Or delete a Collection Version. Once published, anyone
redaction. Currently, there is no way to deprecate a Collection Or delete a Collection Version. Once published, anyone who downloads or installs the collection can view the secrets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1989407 - https://github.com/ansible/galaxy/issues/1977
CVE ID: CVE-2021-3682 State: PUBLISHED Published: 2021-08-05T19:51:26 Last Updated: 2024-08-03T17:01:07.707Z Vendors: n/a Products: QEMU Problem Types: CWE-763 Description: A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full. A malicious SPICE client could use this flaw to make QEMU call free() with faked heap chunk metadata, resulting in a crash of QEMU or potential code execution with the privileges of the QEMU process on the host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id
n the host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1989651 - https://security.netapp.com/advisory/ntap-20210902-0006/ - https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html - https://www.debian.org/security/2021/dsa-4980 - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-3683 State: PUBLISHED Published: 2021-11-13T09:30:11 Last Updated: 2024-08-03T17:01:08.179Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-352 Description: showdoc is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351 - https://huntr.dev/bounties/063a339a-5d78-40d6-a96a-6716960e8134
CVE ID: CVE-2021-3684 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T15:19:30.784Z Vendors: n/a Products: assisted-installer Problem Types: CWE-532 Description: A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull container images from the registry as the associated user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1985962 - https://github.com/openshift/assisted-installer/commi
eferences: - https://bugzilla.redhat.com/show_bug.cgi?id=1985962 - https://github.com/openshift/assisted-installer/commit/f3800cfa3d64ce6dcd6f7b73f0578bb99bfdaf7a - https://github.com/openshift/assisted-installer/commit/2403dad3795406f2c5d923af0894e07bc8b0bdc4
CVE ID: CVE-2021-3688 State: PUBLISHED Published: 2022-08-26T15:25:40 Last Updated: 2024-08-03T17:01:08.137Z Vendors: n/a Products: Red Hat JBCS HTTP Server Problem Types: CWE-200 Description: A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1990252 - https://access.r
yst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1990252 - https://access.redhat.com/security/cve/CVE-2021-3688
CVE ID: CVE-2021-3689 State: PUBLISHED Published: 2021-08-10T10:21:30 Last Updated: 2024-08-03T17:01:07.696Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: yiisoft Products: yiisoft/yii2 Problem Types: CWE-1241 Description: yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f - https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46
CVE ID: CVE-2021-3690 State: PUBLISHED Published: 2022-08-23T15:50:35 Last Updated: 2024-08-03T17:01:08.307Z Vendors: n/a Products: undertow Problem Types: CWE-400 Description: A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability. Additional Analyst Notes: - CVE Program Container: References: - https://issues.redhat.com/browse/UNDERTOW-1935 - https://bugzilla.redhat.com/show_bug.cgi?id=1991299 - https://access.redhat.com/security/cve/CVE-2021-3690 - https://github.com/undertow-io/undertow/commit/c7e84a0b7efced38506d
tps://access.redhat.com/security/cve/CVE-2021-3690 - https://github.com/undertow-io/undertow/commit/c7e84a0b7efced38506d7d1dfea5902366973877
CVE ID: CVE-2021-3691 State: REJECTED Published: 2022-08-26T15:25:43 Last Updated: 2022-08-26T15:25:43 Description: No description available.
CVE ID: CVE-2021-3692 State: PUBLISHED Published: 2021-08-10T15:36:00 Last Updated: 2024-08-03T17:01:08.488Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: yiisoft Products: yiisoft/yii2 Problem Types: CWE-1241 Description: yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46 - https://huntr.dev/bounties/55517f19-5c28-4db2-8b00-f78f841e8aba
CVE ID: CVE-2021-3693 State: PUBLISHED Published: 2021-08-23T12:41:57 Last Updated: 2024-08-03T17:01:07.977Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ledgersmb Products: ledgersmb/ledgersmb Problem Types: CWE-79 Description: LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/daf1384d-648a-43fd-9b35-5c37d8ead667 - https://ledgersmb.org/cve-2021-3693-cross-site-scripting - https://www.debian.org
daf1384d-648a-43fd-9b35-5c37d8ead667 - https://ledgersmb.org/cve-2021-3693-cross-site-scripting - https://www.debian.org/security/2021/dsa-4962
CVE ID: CVE-2021-3694 State: PUBLISHED Published: 2021-08-23T12:41:58 Last Updated: 2024-08-03T17:01:08.128Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: ledgersmb Products: ledgersmb/ledgersmb Problem Types: CWE-79 Description: LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ef7f4cf7-3a81-4516-b261-f5b6ac21430c - https://github.com/ledgersmb/ledgersmb/commit/98fa476d46a4a7e5e9492ed69b4fa190be5547fc
cf7-3a81-4516-b261-f5b6ac21430c - https://github.com/ledgersmb/ledgersmb/commit/98fa476d46a4a7e5e9492ed69b4fa190be5547fc - https://ledgersmb.org/cve-2021-3694-cross-site-scripting - https://www.debian.org/security/2021/dsa-4962
CVE ID: CVE-2021-3695 State: PUBLISHED Published: 2022-07-06T15:06:38 Last Updated: 2024-08-03T17:01:08.290Z Vendors: n/a Products: grub2 Problem Types: CWE-787 Description: A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform some triage over the heap layout to achieve signifcant results, also the values written into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 ve
into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 versions prior grub-2.12. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1991685 - https://security.gentoo.org/glsa/202209-12 - https://security.netapp.com/advisory/ntap-20220930-0001/
CVE ID: CVE-2021-3696 State: PUBLISHED Published: 2022-07-06T15:06:43 Last Updated: 2024-08-03T17:01:08.303Z Vendors: n/a Products: grub2 Problem Types: CWE-787 Description: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12. Additional Analyst Notes: - CVE Program Container: References: - http
This flaw affects grub2 versions prior grub-2.12. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1991686 - https://security.gentoo.org/glsa/202209-12 - https://security.netapp.com/advisory/ntap-20220930-0001/
CVE ID: CVE-2021-3697 State: PUBLISHED Published: 2022-07-06T15:06:47 Last Updated: 2024-08-03T17:01:08.539Z Vendors: n/a Products: grub2 Problem Types: CWE-787 Description: A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.c
ub2 versions prior grub-2.12. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1991687 - https://security.gentoo.org/glsa/202209-12 - https://security.netapp.com/advisory/ntap-20220930-0001/
CVE ID: CVE-2021-3698 State: PUBLISHED Published: 2022-03-08T14:07:49 Last Updated: 2024-08-03T17:01:07.967Z Vendors: n/a Products: cockpit Problem Types: CWE-295 Description: A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1992149
CVE ID: CVE-2021-3700 State: PUBLISHED Published: 2022-02-24T18:50:17 Last Updated: 2024-08-03T17:01:08.432Z Vendors: n/a Products: usbredir Problem Types: CWE-416 Description: A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1992830 - https://gitlab.freedesktop.org/spice/usbredir/-/commit/03c519ff5831ba - https://lists.debian.org/debian-lts-announce/2022/03/msg00030.h
freedesktop.org/spice/usbredir/-/commit/03c519ff5831ba - https://lists.debian.org/debian-lts-announce/2022/03/msg00030.html
CVE ID: CVE-2021-3701 State: PUBLISHED Published: 2022-08-23T15:50:47 Last Updated: 2024-08-03T17:01:08.323Z Vendors: n/a Products: ansible-runner Problem Types: CWE-276 Description: A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate user in a place they did not expect. The highest threat from this vulnerability is to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?
nd integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1977959 - https://access.redhat.com/security/cve/CVE-2021-3701 - https://github.com/ansible/ansible-runner/issues/738 - https://github.com/ansible/ansible-runner/pull/742/commits
CVE ID: CVE-2021-3702 State: PUBLISHED Published: 2022-08-23T15:51:01 Last Updated: 2024-08-03T17:01:07.921Z Vendors: n/a Products: ansible-runner Problem Types: CWE-362 Description: A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's private_data_dir the next time ansible-runner made use of the private_data_dir. The highest Threat out of this flaw is to integrity and confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible-runner/pull/742/commits - https://bugzilla.
s: - CVE Program Container: References: - https://github.com/ansible/ansible-runner/pull/742/commits - https://bugzilla.redhat.com/show_bug.cgi?id=1977965 - https://access.redhat.com/security/cve/CVE-2021-3702
CVE ID: CVE-2021-3703 State: PUBLISHED Published: 2022-08-26T15:25:40 Last Updated: 2024-08-03T17:01:07.753Z Vendors: n/a Products: Serverless Problem Types: NA Description: It was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed in RHSA for Serverless 1.16.0 and Serverless client kn 1.16.0. These have been fixed with Serverless 1.17.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1992955 - https://access.redhat.com/security/cve/CVE-2021-3703
CVE ID: CVE-2021-3704 State: PUBLISHED Published: 2021-11-01T13:15:59 Last Updated: 2024-08-03T17:01:07.950Z Vendors: n/a Products: HP LaserJet Pro M501 Series J8H61A; HP LaserJet Pro M501 Series J8H60A Problem Types: Denial of Service Description: Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of Service on the device. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_4411563-4411589-16/hpsbpi03741
CVE ID: CVE-2021-3705 State: PUBLISHED Published: 2021-11-01T13:20:02 Last Updated: 2024-08-03T17:01:08.429Z Vendors: n/a Products: HP LaserJet Pro M501 Series J8H61A; HP LaserJet Pro M501 Series J8H60A Problem Types: unauthorized configuration Description: Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthorized user to reconfigure, reset the device. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_4411563-4411589-16/hpsbpi03741
CVE ID: CVE-2021-3706 State: PUBLISHED Published: 2021-09-15T06:30:13 Last Updated: 2024-08-03T17:01:07.881Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: pi-hole Products: pi-hole/adminlte Problem Types: CWE-1004 Description: adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ac7fd77b-b31b-4d02-aebd-f89ecbae3fce - https://github.com/pi-hole/adminlte/commit/cf8602eedd4a31eadb72372fc878c12d342f8600
CVE ID: CVE-2021-3707 State: PUBLISHED Published: 2021-08-16T04:55:11 Last Updated: 2024-08-03T17:01:07.681Z Vendors: D-Link Products: DSL-2750U Problem Types: CWE-15 Description: D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HadiMed/firmware-analysis/blob/main/DSL-2750U%20%28firmware%20version%201.6%29/README.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP1023
mware%20version%201.6%29/README.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10230 - https://jvn.jp/en/vu/JVNVU92088210/
CVE ID: CVE-2021-3708 State: PUBLISHED Published: 2021-08-16T04:55:13 Last Updated: 2024-08-03T17:01:07.839Z Vendors: D-Link Products: DSL-2750U Problem Types: CWE-78 Description: D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HadiMed/firmware-analysis/blob/main/DSL-2750U%20%28firmware%20version%201.6%29/README.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10230 - https://jvn.jp/
.6%29/README.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10230 - https://jvn.jp/en/vu/JVNVU92088210/
CVE ID: CVE-2021-3709 State: PUBLISHED Published: 2021-10-01T02:35:21.228849Z Last Updated: 2024-09-16T23:31:13.094Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Canonical Products: apport Problem Types: CWE-538 Description: Function check_attachment_for_errors() in file data/general-hooks/ubuntu.py could be tricked into exposing private data via a constructed crash file. This issue affects: apport 2.14.1 versions prior to 2.14.1-0ubuntu3.29+esm8; 2.20.1 versions prior to 2.20.1-0ubuntu2.30+esm2; 2.20.9 versions prior to 2.20.9-0ubuntu7.26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3; Additional Analyst No
26; 2.20.11 versions prior to 2.20.11-0ubuntu27.20; 2.20.11 versions prior to 2.20.11-0ubuntu65.3; Additional Analyst Notes: - CVE Program Container: References: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3709 - https://ubuntu.com/security/notices/USN-5077-1 - https://ubuntu.com/security/notices/USN-5077-2 - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1934308