Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-46775 State: PUBLISHED Published: 2023-05-09T18:36:26.852Z Last Updated: 2025-01-28T15:56:51.087Z Vendors: AMD Products: 2nd Gen AMD EPYC™ , 3rd Gen AMD EPYC™ Description: Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to a loss of integrity and code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-46778 State: PUBLISHED Published: 2022-08-09T20:20:12.911867Z Last Updated: 2024-09-17T00:36:13.880Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1039
CVE ID: CVE-2021-46779 State: PUBLISHED Published: 2023-01-10T20:56:52.789Z Last Updated: 2025-04-09T14:47:59.765Z Vendors: AMD, AMD Products: 1st Gen EPYC, 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-46780 State: PUBLISHED Published: 2022-04-25T15:50:49 Last Updated: 2024-08-04T05:17:42.355Z Vendors: Unknown Products: Easy Google Maps Problem Types: CWE-79 Description: The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/cba4ccdd-9331-4ca0-b910-8f427ed9b540
CVE ID: CVE-2021-46781 State: PUBLISHED Published: 2022-04-25T15:50:50 Last Updated: 2024-08-04T05:17:43.086Z Vendors: Unknown Products: Coming Soon by Supsystic Problem Types: CWE-79 Description: The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/49589867-f764-4c4a-b640-84973c673b23
CVE ID: CVE-2021-46782 State: PUBLISHED Published: 2022-04-25T15:50:51 Last Updated: 2024-08-04T05:17:42.300Z Vendors: Unknown Products: Pricing Table by Supsystic Problem Types: CWE-79 Description: The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/39e69487-aa53-4b78-a422-12515a6449bf
CVE ID: CVE-2021-46784 State: PUBLISHED Published: 2022-07-17T00:00:00 Last Updated: 2024-08-04T05:17:42.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/squid-cache/squid/commit/5e2ea2b13bd98f53e29964ca26bb0d602a8a12b9 - http://www.squid-cache.org/Versions/v4/changesets/SQUID-2021_7.patch - http://www.squid-cache.org/Versions/v5/changesets/SQUID-2021_7.patch - https://github.com/squid-cache/squid/security/advisories/GH
.squid-cache.org/Versions/v5/changesets/SQUID-2021_7.patch - https://github.com/squid-cache/squid/security/advisories/GHSA-f5cp-6rh3-284w - https://security-tracker.debian.org/tracker/CVE-2021-46784 - https://security.netapp.com/advisory/ntap-20221223-0007/ - http://www.openwall.com/lists/oss-security/2023/10/13/1 - http://www.openwall.com/lists/oss-security/2023/10/13/10 - http://www.openwall.com/lists/oss-security/2023/10/21/1
CVE ID: CVE-2021-46785 State: PUBLISHED Published: 2022-05-13T15:01:58 Last Updated: 2024-08-04T05:17:42.558Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper permission control vulnerability Description: The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2021-46786 State: PUBLISHED Published: 2022-05-13T15:02:16 Last Updated: 2024-08-04T05:17:42.429Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Out-of-bounds memory access vulnerability Description: The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2021-46787 State: PUBLISHED Published: 2022-05-13T15:02:34 Last Updated: 2024-08-04T05:17:42.364Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Improper permission control vulnerability Description: The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162
CVE ID: CVE-2021-46788 State: PUBLISHED Published: 2022-05-13T15:02:51 Last Updated: 2024-08-04T05:17:42.325Z Vendors: Huawei Products: EMUI, Magic UI Problem Types: Third-party pop-up window coverage vulnerability Description: Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/
CVE ID: CVE-2021-46789 State: PUBLISHED Published: 2022-05-13T15:03:07 Last Updated: 2024-08-04T05:17:42.682Z Vendors: n/a Products: EMUI;Magic UI Problem Types: Configuration defectsl vulnerability Description: Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/5/ - https://consumer.huawei.com/en/support/bulletin/2022/6/
CVE ID: CVE-2021-46790 State: PUBLISHED Published: 2022-05-02T05:10:09 Last Updated: 2024-08-04T05:17:42.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/issues/16 - http://www.openwall.com/lists/oss-security/2022/05/26/1 - https://www.debian.org/security/2022/dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX
dsa-5160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JPX6OUCQKZX4PN5DQPVDUFZCOOZUX7Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECDCISL24TYH4CTDFCUVF24WAKRSYF7F/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAXFYIJWT5SHHRNPOJETM77EIMJ6ZP6I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEXHDCUSLJD2HSPMAAVZ5AWMPUOG6UI7/
CVE ID: CVE-2021-46791 State: PUBLISHED Published: 2023-01-10T20:56:54.107Z Last Updated: 2025-04-09T14:46:50.603Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-46792 State: PUBLISHED Published: 2023-05-09T19:01:38.204Z Last Updated: 2025-01-28T15:33:26.980Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Description: Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46793 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-46794 State: PUBLISHED Published: 2023-05-09T19:01:47.728Z Last Updated: 2025-01-28T15:25:54.283Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Ryzen™ Threadripper™ PRO Processors “Chagall” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryz
sors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Description: Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting i
ut of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
CVE ID: CVE-2021-46795 State: PUBLISHED Published: 2023-01-10T20:53:25.868Z Last Updated: 2025-04-09T15:13:26.855Z Vendors: AMD Products: Ryzen 5000 Series, Ryzen 3000 Series Problem Types: n/a Description: A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
CVE ID: CVE-2021-46796 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-46799 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-46811 State: PUBLISHED Published: 2022-06-13T15:06:25 Last Updated: 2024-08-04T05:17:42.663Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Improper permission management vulnerability Description: HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2021-46812 State: PUBLISHED Published: 2022-06-13T15:04:08 Last Updated: 2024-08-04T05:17:42.631Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2021-46813 State: PUBLISHED Published: 2022-06-13T15:06:56 Last Updated: 2024-08-04T05:17:42.754Z Vendors: Huawei Products: EMUI, Magic UI Problem Types: Weaknesses Introduced During Design Description: Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/
CVE ID: CVE-2021-46814 State: PUBLISHED Published: 2022-06-13T14:54:56 Last Updated: 2024-08-04T05:17:42.632Z Vendors: Huawei Products: HarmonyOS, EMUI, Magic UI Problem Types: Out-of-bounds memory read/write vulnerability Description: The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2022/6/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482
CVE ID: CVE-2021-46815 State: REJECTED Published: 2022-06-13T15:07:14 Last Updated: 2022-07-11T14:04:57 Description: No description available.
CVE ID: CVE-2021-46816 State: PUBLISHED Published: 2022-06-13T12:19:12.164Z Last Updated: 2025-04-23T18:16:53.338Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-787 Description: Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.c
4A file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-67.html
CVE ID: CVE-2021-46817 State: PUBLISHED Published: 2022-06-13T12:15:19.567Z Last Updated: 2025-04-23T18:16:58.579Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Media Encoder Problem Types: CWE-787 Description: Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.a
ious M4A file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/media-encoder/apsb21-70.html
CVE ID: CVE-2021-46818 State: PUBLISHED Published: 2022-06-13T12:09:16.834Z Last Updated: 2025-04-23T18:17:09.888Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Media Encoder Problem Types: CWE-787 Description: Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.a
CVE ID: CVE-2021-46820 State: PUBLISHED Published: 2022-06-16T20:36:26 Last Updated: 2024-08-04T05:17:42.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/categories.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XOS-Shop/xos_shop_system/issues/1
CVE ID: CVE-2021-46822 State: PUBLISHED Published: 2022-06-18T15:27:44 Last Updated: 2024-08-04T05:17:42.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libjpeg-turbo/libjpeg-turbo/commit/f35fd27ec641c42d6b115bfa595e483ec58188d2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/221567
CVE ID: CVE-2021-46823 State: PUBLISHED Published: 2022-06-18T15:27:17 Last Updated: 2024-08-04T05:17:42.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python-ldap/python-ldap/security/advisories/GHSA-r8wq-qrxc-hmcm - https://exchange.xforce.ibmcloud.
- https://github.com/python-ldap/python-ldap/security/advisories/GHSA-r8wq-qrxc-hmcm - https://exchange.xforce.ibmcloud.com/vulnerabilities/221507
CVE ID: CVE-2021-46824 State: PUBLISHED Published: 2022-06-23T14:36:57 Last Updated: 2024-08-04T05:17:42.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Account form in student_profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49559 - https://packetstormsecurity.com/files/161394/School-File-Management-System-1.0-Cross-Site-Scripting.html - https://www.sourcecodester.com/php/14155/school-file-management-system.html
CVE ID: CVE-2021-46825 State: PUBLISHED Published: 2022-07-07T15:48:36 Last Updated: 2024-08-04T05:17:42.607Z Vendors: n/a Products: Advance Secure Gateway and ProxySG Problem Types: Information Disclosure Description: Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web server responses to unintended clients. Severity/CVSSv3: High / 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Additional Analyst Notes: - CVE Program Container: References: - https://support.
.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20638
CVE ID: CVE-2021-46827 State: PUBLISHED Published: 2022-07-13T04:55:13 Last Updated: 2024-08-04T05:17:42.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals (in online documentation generated using Oxygen XML WebHelp) allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field. Additional Analyst Notes: - CVE Program Container: References: - https://www.oxygenxml.com/security/advisory/SYNC-2021-072301.html
CVE ID: CVE-2021-46828 State: PUBLISHED Published: 2022-07-20T00:00:00.000Z Last Updated: 2025-05-05T16:44:46.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.linux-nfs.org/?p=steved/libtirpc.git%3Ba=commit%3Bh=86529758570cef4c73fb9b9c4104fdc510f701ed - https://www.debian.org/security/2022/dsa-5200 - https://lists.debian.org/debian-lts-a
570cef4c73fb9b9c4104fdc510f701ed - https://www.debian.org/security/2022/dsa-5200 - https://lists.debian.org/debian-lts-announce/2022/08/msg00004.html - https://security.netapp.com/advisory/ntap-20221007-0004/ - https://security.gentoo.org/glsa/202210-33
CVE ID: CVE-2021-46829 State: PUBLISHED Published: 2022-07-24T18:47:35 Last Updated: 2024-08-04T05:17:42.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/190 - https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/merge_requests/121 - https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/bca00