Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3614 State: PUBLISHED Published: 2021-07-16T20:30:20 Last Updated: 2024-08-03T17:01:07.203Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Notebook BIOS Problem Types: CWE-636 Description: A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-65529
CVE ID: CVE-2021-3615 State: PUBLISHED Published: 2021-08-17T16:25:25 Last Updated: 2024-08-03T17:01:07.341Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Smart Camera X3, X5, and C2E firmware Problem Types: CWE-94 Description: A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow code execution if a specific file exists on the attached SD card. This vulnerability is the same as CNVD-2021-45262. Additional Analyst Notes: - CVE Program Container: References: - https://iknow.lenovo.com.cn/detail/dc_198417.html - https://www.cnvd.org.cn/flaw/show/CNVD-2021-45262
CVE ID: CVE-2021-3616 State: PUBLISHED Published: 2021-08-17T16:25:27 Last Updated: 2024-08-03T17:01:07.695Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Lenovo Products: Smart Camera X3, X5, and C2E firmware Problem Types: CWE-285 Description: A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651. Additional Analyst Notes: - CVE Program Container: References: - https://iknow.lenovo.com.cn/detail/dc_198417.html - https://www.cnvd.org.cn/flaw/show/CNVD-2020-68651
CVE ID: CVE-2021-3617 State: PUBLISHED Published: 2021-08-17T16:25:29 Last Updated: 2024-08-03T17:01:07.803Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Smart Camera X3, X5, and C2E firmware Problem Types: CWE-78 Description: A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a specially crafted network configuration. This vulnerability is the same as CNVD-2020-68652. Additional Analyst Notes: - CVE Program Container: References: - https://iknow.lenovo.com.cn/detail/dc_198417.html - https://www.cnvd.org.cn/flaw/show/CNVD-2020-68652
CVE ID: CVE-2021-3618 State: PUBLISHED Published: 2022-03-23T00:00:00 Last Updated: 2024-08-03T17:01:07.459Z Vendors: n/a Products: ALPACA Problem Types: CWE-295 Description: ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the applicati
ss-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1975623 - https://alpaca-attack.com/ - https://lists.debian.org/debian-lts-announce/2022/11/msg00031.html
CVE ID: CVE-2021-3619 State: PUBLISHED Published: 2021-08-17T19:07:39.160750Z Last Updated: 2024-09-17T03:59:06.926Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: Rapid7 Products: Velociraptor Problem Types: CWE-79 Description: Rapid7 Velociraptor 0.5.9 and prior is vulnerable to a post-authentication persistent cross-site scripting (XSS) issue, where an authenticated user could abuse MIME filetype sniffing to embed executable code on a malicious upload. This issue was fixed in version 0.6.0. Note that login rights to Velociraptor is nearly always reserved for trusted and verified users with IT security backgrounds. Additional Analyst Notes: - CVE Program Con
always reserved for trusted and verified users with IT security backgrounds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Velocidex/velociraptor/pull/1118 - https://github.com/Velocidex/velociraptor/releases/tag/v0.6.0
CVE ID: CVE-2021-3620 State: PUBLISHED Published: 2022-03-03T18:23:38.000Z Last Updated: 2025-02-13T16:28:25.255Z Vendors: n/a Products: ansible Problem Types: CWE-209 Description: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1975767 - https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes - https://github.com/ansible
s://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes - https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0 - https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
CVE ID: CVE-2021-3621 State: PUBLISHED Published: 2021-12-23T00:00:00.000Z Last Updated: 2025-11-03T20:33:46.999Z Vendors: n/a Products: sssd Problem Types: CWE-77 Description: A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://sssd.io/release-notes/sssd-2.6.0.html - https://bugzilla.re
nalyst Notes: - CVE Program Container: References: - https://sssd.io/release-notes/sssd-2.6.0.html - https://bugzilla.redhat.com/show_bug.cgi?id=1975142 - https://lists.debian.org/debian-lts-announce/2023/05/msg00028.html
CVE ID: CVE-2021-3622 State: PUBLISHED Published: 2021-12-23T20:31:25 Last Updated: 2024-08-03T17:01:07.599Z Vendors: n/a Products: hivex Problem Types: CWE-400 Description: A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/USD4OEV6L3RPHE32V2MJ4JPFBODINWSU/ - https://lists.fedoraproject.
list/package-announce%40lists.fedoraproject.org/message/USD4OEV6L3RPHE32V2MJ4JPFBODINWSU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S35TVTAPHORSUIFYNFBHKLQRPVFUPXBE/ - https://bugzilla.redhat.com/show_bug.cgi?id=1975489 - https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255 - https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html
CVE ID: CVE-2021-3623 State: PUBLISHED Published: 2022-03-02T22:02:36 Last Updated: 2024-08-03T17:01:08.325Z Vendors: n/a Products: libtpms Problem Types: CWE-787 Description: A flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets containing illegal values and may lead to an out-of-bounds access when the volatile state of the TPM 2 is marshalled/written or unmarshalled/read. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7KZSYMTE7Z4BBEZUWO2DIMQDWMGEP46/ - https://bug
ect.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7KZSYMTE7Z4BBEZUWO2DIMQDWMGEP46/ - https://bugzilla.redhat.com/show_bug.cgi?id=1976806 - https://github.com/stefanberger/libtpms/pull/223 - https://github.com/stefanberger/libtpms/commit/2f30d62 - https://github.com/stefanberger/libtpms/commit/7981d9a - https://github.com/stefanberger/libtpms/commit/2e6173c
CVE ID: CVE-2021-3624 State: PUBLISHED Published: 2022-04-18T16:20:35 Last Updated: 2024-08-03T17:01:07.967Z Vendors: n/a Products: dcraw Problem Types: CWE-20 Description: There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984761
CVE ID: CVE-2021-3625 State: PUBLISHED Published: 2021-10-05T20:50:20.352754Z Last Updated: 2024-09-16T18:49:27.304Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-122 Description: Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363
CVE ID: CVE-2021-3626 State: PUBLISHED Published: 2021-10-01T02:35:19.696506Z Last Updated: 2024-09-17T03:23:37.922Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Products: Multipass Problem Types: CWE-73, CWE-284 Description: The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/canonical/multipass/pull/2150
CVE ID: CVE-2021-3627 State: REJECTED Published: 2022-08-26T15:25:42 Last Updated: 2022-08-26T15:25:42 Description: No description available.
CVE ID: CVE-2021-3628 State: PUBLISHED Published: 2021-08-30T17:06:59.834158Z Last Updated: 2024-09-17T04:29:31.347Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: OpenKM Products: Document Management Community Problem Types: CWE-79 Description: OpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnerability by injecting arbitrary code via de uuid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/openkm-document-management-community-vulnerable-cross-site - https://github.com/op
/en/early-warning/security-advisories/openkm-document-management-community-vulnerable-cross-site - https://github.com/openkm/document-management-system/issues/278 - https://docs.openkm.com/kcenter/view/okm-6.3-com/migration-guide.html
CVE ID: CVE-2021-3629 State: PUBLISHED Published: 2022-05-24T18:19:00 Last Updated: 2024-08-03T17:01:07.495Z Vendors: n/a Products: undertow Problem Types: CWE-400 Description: A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1977362 - https://security.netapp.com/advisory/ntap-20220729-0008/
CVE ID: CVE-2021-3630 State: PUBLISHED Published: 2021-06-30T13:27:28 Last Updated: 2024-08-03T17:01:07.833Z Vendors: n/a Products: djvulibre Problem Types: CWE-787 Description: An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1977427 - https://lists.debian.org/debian-lts-announce/2021/07/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVKYWV4P
sg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVKYWV4P5XGA3FXKGFB443MKC32L7YQB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3B4QZCICPZRDXA2HOIACSQNZB2VEHSM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIZIAJWGKI26DKDOGJS7J7CIQGHHMIHG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MRXCW4BUGAJLGF6IWQWUZ2YBICMZCPK/ - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2021-3631 State: PUBLISHED Published: 2022-03-02T00:00:00 Last Updated: 2024-11-19T19:33:55.041Z Vendors: n/a Products: libvirt Problem Types: CWE-732 Description: A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1977726 - https://gitlab.com/libvirt/libvirt/-/issues/153 - https://gitlab.com/
ps://bugzilla.redhat.com/show_bug.cgi?id=1977726 - https://gitlab.com/libvirt/libvirt/-/issues/153 - https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2 - https://access.redhat.com/errata/RHSA-2021:3631 - https://security.netapp.com/advisory/ntap-20220331-0010/ - https://security.gentoo.org/glsa/202210-06 - https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html
CVE ID: CVE-2021-3632 State: PUBLISHED Published: 2022-08-26T15:25:41 Last Updated: 2024-08-03T17:01:08.129Z Vendors: n/a Products: keycloak Problem Types: CWE-287 Description: A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow. Additional Analyst Notes: - CVE Program Container: References: - https://issues.redhat.com/browse/KEYCLOAK-18500 - https://bugzilla.redhat.com/show_bug.cgi?id=1978196 - https://access.redhat.com/security/cve/CVE-2021-3632 - https://github.com/keycloak/keycloak/pull/8203 - https://github.com/keycloak/keycloak/co
om/security/cve/CVE-2021-3632 - https://github.com/keycloak/keycloak/pull/8203 - https://github.com/keycloak/keycloak/commit/65480cb5a11630909c086f79d396004499fbd1e4
CVE ID: CVE-2021-3633 State: PUBLISHED Published: 2021-08-17T16:25:30 Last Updated: 2024-08-03T17:01:07.381Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Driver Management Problem Types: CWE-347 Description: A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://iknow.lenovo.com.cn/detail/dc_198418.html
CVE ID: CVE-2021-3634 State: PUBLISHED Published: 2021-08-31T00:00:00 Last Updated: 2024-08-03T17:01:07.562Z Vendors: n/a Products: libssh Problem Types: CWE-787 Description: A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange meth
which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating "secret_hash" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1978810 - https://www.debian.org/security/2021/dsa-4965 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVWAAB2XMKEUMPMDALINKAA4U2QM4LNG/ - https://lists.fedoraproject.org/archiv
ge-announce%40lists.fedoraproject.org/message/SVWAAB2XMKEUMPMDALINKAA4U2QM4LNG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKYD3ZRAMDAQX3ZW6THHUF3GXN7FF6B4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DRK67AJCWYYVAGF5SGAHNZXCX3PN3ZFP/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211004-0003/ - https://security.gentoo.org/glsa/202312-05
CVE ID: CVE-2021-3635 State: PUBLISHED Published: 2021-08-13T13:22:05 Last Updated: 2024-08-03T17:01:08.141Z Vendors: n/a Products: kernel Problem Types: CWE-119 Description: A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1976946
CVE ID: CVE-2021-3636 State: PUBLISHED Published: 2021-07-30T19:27:06 Last Updated: 2024-08-03T17:01:07.589Z Vendors: n/a Products: openshift Problem Types: CWE-295 Description: It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service. Additional An
llow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1978621
CVE ID: CVE-2021-3637 State: PUBLISHED Published: 2021-07-09T10:33:23 Last Updated: 2024-08-03T17:01:08.303Z Vendors: n/a Products: keycloak-model-infinispan Problem Types: CWE-770 Description: A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1979638
CVE ID: CVE-2021-3638 State: PUBLISHED Published: 2022-03-03T00:00:00 Last Updated: 2024-08-03T17:01:07.554Z Vendors: n/a Products: QEMU Problem Types: CWE-787 Description: An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1979858 - https://ubuntu.com/security/CVE-2021-3638 - https
r: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1979858 - https://ubuntu.com/security/CVE-2021-3638 - https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg01682.html - https://security.netapp.com/advisory/ntap-20220407-0003/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTVPHLLXJ65BUMFBUUZ35F3J632SLFRK/
CVE ID: CVE-2021-3639 State: PUBLISHED Published: 2022-08-22T14:49:03 Last Updated: 2024-08-03T17:01:07.702Z Vendors: n/a Products: mod_auth_mellon Problem Types: CWE-601 Description: A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1980648 - https://access.redhat.com/security/cve/
m Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1980648 - https://access.redhat.com/security/cve/CVE-2021-3639 - https://github.com/latchset/mod_auth_mellon/commit/42a11261b9dad2e48d70bdff7c53dd57a12db6f5
CVE ID: CVE-2021-3640 State: PUBLISHED Published: 2022-03-03T22:04:15 Last Updated: 2024-08-03T17:01:07.744Z Vendors: n/a Products: kernel Problem Types: CWE-362 Description: A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1980646 -
. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1980646 - https://ubuntu.com/security/CVE-2021-3640 - https://www.openwall.com/lists/oss-security/2021/07/22/1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/bluetooth/sco.c?h=v5.16&id=99c23da0eed4fd20cae8243f2b51e10e66aa0951 - https://github.com/torvalds/linux/commit/99c23da0eed4fd20cae8243f2b51e10e66aa0951 - https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096 - https://security.netapp.com/advisory/ntap-20220419-0003/
CVE ID: CVE-2021-3641 State: PUBLISHED Published: 2021-11-09T14:10:14.024869Z Last Updated: 2024-09-17T02:47:52.551Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Bitdefender Products: GravityZone Problem Types: CWE-59 Description: Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/improper-link-resolution-b
CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921 - https://www.zerodayinitiative.com/advisories/ZDI-22-143/