Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3586 State: PUBLISHED Published: 2022-08-22T14:46:32 Last Updated: 2024-08-03T17:01:07.389Z Vendors: n/a Products: servicemesh-operator Problem Types: CWE-1188 Description: A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1967738 - https://access.redhat.com/security/cve/CVE-2021-3586
CVE ID: CVE-2021-3587 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-3588 State: PUBLISHED Published: 2021-06-10T02:30:11.654259Z Last Updated: 2024-09-16T23:37:02.790Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: BlueZ Products: BlueZ Problem Types: CWE-788, CWE-125 Description: The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bluez/bluez/issues/70 - https://security.gentoo.org/glsa/202209-16
CVE ID: CVE-2021-3589 State: PUBLISHED Published: 2022-03-23T19:46:10 Last Updated: 2024-08-03T17:01:07.577Z Vendors: n/a Products: Foreman Ansible Problem Types: CWE-306 Description: An authorization flaw was found in Foreman Ansible. An authenticated attacker with certain permissions to create and run Ansible jobs can access hosts through job templates. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2021-3589 - https://bugzilla.redhat.com/show_bug.cgi?id=1969265
CVE ID: CVE-2021-3590 State: PUBLISHED Published: 2022-08-22T14:48:17 Last Updated: 2024-08-03T17:01:06.607Z Vendors: n/a Products: foreman Problem Types: CWE-200 Description: A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1969258 - https://access.redhat.com/security/cve/CVE-2021-3590
CVE ID: CVE-2021-3591 State: REJECTED Published: 2021-08-05T20:33:52 Last Updated: 2021-08-05T20:33:52 Description: No description available.
CVE ID: CVE-2021-3592 State: PUBLISHED Published: 2021-06-15T00:00:00 Last Updated: 2024-08-03T17:01:06.527Z Vendors: n/a Products: QEMU Problem Types: CWE-824 Description: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the 'bootp_t' structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0. Additional Analyst Notes: - CVE Program Container: Refere
entiality. This flaw affects libslirp versions prior to 4.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1970484 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ - https://security.gentoo.org/glsa/202107-44 - https://security.netapp.com/advisory/ntap-20210805-0004/ - https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html - https://lists.debian.org/debian-lts-announce/2021/09/msg00004.html - https://li
ian-lts-announce/2021/09/msg00000.html - https://lists.debian.org/debian-lts-announce/2021/09/msg00004.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE ID: CVE-2021-3593 State: PUBLISHED Published: 2021-06-15T00:00:00 Last Updated: 2024-08-03T17:01:07.949Z Vendors: n/a Products: QEMU Problem Types: CWE-824 Description: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0. Additional Analyst Notes: - CVE Program Container: Reference
iality. This flaw affects libslirp versions prior to 4.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1970487 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ - https://security.gentoo.org/glsa/202107-44 - https://security.netapp.com/advisory/ntap-20210805-0004/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE ID: CVE-2021-3594 State: PUBLISHED Published: 2021-06-15T00:00:00 Last Updated: 2024-08-03T17:01:07.408Z Vendors: n/a Products: QEMU Problem Types: CWE-824 Description: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0. Additional Analyst Notes: - CVE Program Container: References
ality. This flaw affects libslirp versions prior to 4.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1970491 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ - https://security.gentoo.org/glsa/202107-44 - https://security.netapp.com/advisory/ntap-20210805-0004/ - https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE ID: CVE-2021-3595 State: PUBLISHED Published: 2021-06-15T00:00:00 Last Updated: 2024-08-03T17:01:07.535Z Vendors: n/a Products: QEMU Problem Types: CWE-824 Description: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0. Additional Analyst Notes: - CVE Program Container: Reference
iality. This flaw affects libslirp versions prior to 4.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1970489 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ - https://security.gentoo.org/glsa/202107-44 - https://security.netapp.com/advisory/ntap-20210805-0004/ - https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE ID: CVE-2021-3596 State: PUBLISHED Published: 2022-02-24T00:00:00 Last Updated: 2024-08-03T17:01:07.986Z Vendors: n/a Products: ImageMagick Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt() and uses the value directly, which leads to a crash and segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/2624 - https://bugzilla.redhat.com/show_bug.cgi?id=1970569 - https://lists.debian.org/debian-lts-announce/2022/05/
ssues/2624 - https://bugzilla.redhat.com/show_bug.cgi?id=1970569 - https://lists.debian.org/debian-lts-announce/2022/05/msg00018.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2021-3597 State: PUBLISHED Published: 2022-05-24T18:19:11 Last Updated: 2024-08-03T17:01:07.706Z Vendors: n/a Products: undertow Problem Types: CWE-362 Description: A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1970930 - https://security.netapp.com/adviso
rogram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1970930 - https://security.netapp.com/advisory/ntap-20220804-0003/
CVE ID: CVE-2021-3598 State: PUBLISHED Published: 2021-07-06T00:00:00 Last Updated: 2024-08-03T17:01:08.004Z Vendors: n/a Products: OpenEXR Problem Types: CWE-119 Description: There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1970987 - https://security.gentoo.org/glsa/202210-31 - https://www.debian.org/security/2022/dsa-5299 - https://lists.debian.org/debia
ps://security.gentoo.org/glsa/202210-31 - https://www.debian.org/security/2022/dsa-5299 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-3599 State: PUBLISHED Published: 2021-11-12T22:05:33 Last Updated: 2024-08-03T17:01:07.491Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: ThinkPad BIOS Problem Types: CWE-20 Description: A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-67440
CVE ID: CVE-2021-3600 State: PUBLISHED Published: 2024-01-08T18:16:42.087Z Last Updated: 2024-09-04T15:38:28.022Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: The Linux Kernel Organization Products: linux Description: It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3600 - https://ubuntu.com/security/notices/USN-5003-1 - https:/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3600 - https://ubuntu.com/security/notices/USN-5003-1 - https://git.kernel.org/linus/e88b2c6e5a4d9ce30d75391e4d950da74bb2bd90
CVE ID: CVE-2021-3601 State: REJECTED Published: 2022-07-29T09:35:09 Last Updated: 2022-07-29T09:35:09 Description: No description available.
CVE ID: CVE-2021-3602 State: PUBLISHED Published: 2022-03-03T18:26:21 Last Updated: 2024-08-03T17:01:08.065Z Vendors: n/a Products: buildah Problem Types: CWE-200 Description: An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from parent and grandparent processes. When run in a container in a CI/CD environment, environment variables may include sensitive information that was shared with the container in order to be used only by Buildah itself (e.g. container registry credentials). Additional Analyst Notes: - CVE Program Container: Reference
ly by Buildah itself (e.g. container registry credentials). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1969264 - https://ubuntu.com/security/CVE-2021-3602 - https://github.com/containers/buildah/security/advisories/GHSA-7638-r9r3-rmjj - https://github.com/containers/buildah/commit/a468ce0ffd347035d53ee0e26c205ef604097fb0
CVE ID: CVE-2021-3603 State: PUBLISHED Published: 2021-06-17T12:09:42 Last Updated: 2024-08-03T17:01:07.074Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PHPMailer Products: PHPMailer Problem Types: CWE-829 Description: PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is injected into the host project's scope by other means). If the $patternselect parameter to validateAddress() is set to 'php' (the default, defined by PHPMailer::$validator), and the global namespace contains a function called php, it will be called in preference to the built-in validator of the same name. Mitigated in PHPMailer
function called php, it will be called in preference to the built-in validator of the same name. Mitigated in PHPMailer 6.5.0 by denying the use of simple strings as validator function names. Additional Analyst Notes: - CVE Program Container: References: - https://www.huntr.dev/bounties/1-PHPMailer/PHPMailer/ - https://github.com/PHPMailer/PHPMailer/commit/45f3c18dc6a2de1cb1bf49b9b249a9ee36a5f7f3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ/
CVE ID: CVE-2021-3604 State: PUBLISHED Published: 2021-06-18T14:14:47.260436Z Last Updated: 2024-09-16T23:06:31.070Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Primion Digitek Products: Secure 8 (Evalos) Problem Types: CWE 89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: Secure 8 (Evalos) does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database. Additional Analyst Notes: - CVE Program Container: References: - https://
administrator accounts stored in the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe-cert.es/en/early-warning/ics-advisories/primion-digitek-secure-8-sql-injection-vulnerability - http://titaniumaics.blogspot.com/2021/06/vulnerabilidad-zero-day-en-primion.html
CVE ID: CVE-2021-3605 State: PUBLISHED Published: 2021-08-25T00:00:00 Last Updated: 2024-08-03T17:01:07.535Z Vendors: n/a Products: OpenEXR Problem Types: CWE-119 Description: There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1970991 - https://security.gentoo.org/glsa/202210-31 - https://www.debian.org/security/2022/dsa-5299 - https://lists.debian.org/debian-lts-annou
ty.gentoo.org/glsa/202210-31 - https://www.debian.org/security/2022/dsa-5299 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-3606 State: PUBLISHED Published: 2021-07-02T12:30:38 Last Updated: 2024-08-03T17:01:07.343Z Vendors: n/a Products: OpenVPN-GUI Problem Types: CWE-427 Description: OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (openvpn.exe). Additional Analyst Notes: - CVE Program Container: References: - https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements - https://community.openvpn.net/openvpn/wiki/CVE-2021-3606
CVE ID: CVE-2021-3607 State: PUBLISHED Published: 2022-02-24T18:50:19 Last Updated: 2024-08-03T17:01:07.813Z Vendors: n/a Products: QEMU Problem Types: CWE-190 Description: An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.c
em availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1973349 - https://lists.gnu.org/archive/html/qemu-devel/2021-06/msg07925.html - https://security.netapp.com/advisory/ntap-20220318-0002/ - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-3608 State: PUBLISHED Published: 2022-02-24T18:50:20 Last Updated: 2024-08-03T17:01:08.294Z Vendors: n/a Products: QEMU Problem Types: CWE-824 Description: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1973383 - https://lists.gnu.org/archive/html/qemu-devel
ainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1973383 - https://lists.gnu.org/archive/html/qemu-devel/2021-06/msg07926.html - https://security.netapp.com/advisory/ntap-20220318-0002/ - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-3609 State: PUBLISHED Published: 2022-03-03T18:24:59 Last Updated: 2024-08-03T17:01:07.458Z Vendors: n/a Products: kernel Problem Types: CWE-362 Description: .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1971651 - https://www.openwall.com/lists/oss-security/2021/06/19/1 - https://github.com/nrb547/kernel-exploitation/bl
id=1971651 - https://www.openwall.com/lists/oss-security/2021/06/19/1 - https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md - https://github.com/torvalds/linux/commit/d5f9023fa61ee8b94f37a93f08e94b136cf1e463 - https://security.netapp.com/advisory/ntap-20220419-0004/
CVE ID: CVE-2021-3610 State: PUBLISHED Published: 2022-02-24T00:00:00 Last Updated: 2024-08-03T17:01:07.563Z Vendors: n/a Products: ImageMagick Problem Types: CWE-125 Description: A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1973689 - https://github.com/ImageMagick/ImageMagick/commit/930ff0d1a9bc42925a7856e9ea53f5fc9f318bf3 - http://www.openwall.com/lists/oss-security/2023/05/29/4
ck/ImageMagick/commit/930ff0d1a9bc42925a7856e9ea53f5fc9f318bf3 - http://www.openwall.com/lists/oss-security/2023/05/29/4 - http://www.openwall.com/lists/oss-security/2023/06/05/1
CVE ID: CVE-2021-3611 State: PUBLISHED Published: 2022-05-11T15:23:00 Last Updated: 2024-08-03T17:01:07.662Z Vendors: n/a Products: QEMU Problem Types: CWE-119 Description: A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1973784 - https://gitlab.com/qemu-project/qemu/-/issues/542 - https://security.netapp.co
illa.redhat.com/show_bug.cgi?id=1973784 - https://gitlab.com/qemu-project/qemu/-/issues/542 - https://security.netapp.com/advisory/ntap-20220624-0001/ - https://security.gentoo.org/glsa/202208-27
CVE ID: CVE-2021-3612 State: PUBLISHED Published: 2021-07-09T10:33:16 Last Updated: 2024-08-03T17:01:07.361Z Vendors: n/a Products: kernel Problem Types: CWE-20 Description: An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1974079 - https://lore.kernel.org/lin
- CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1974079 - https://lore.kernel.org/linux-input/20210620120030.1513655-1-avlarkin82%40gmail.com/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKGI562LFV5MESTMVTCG5RORSBT6NGBN/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20210805-0005/
CVE ID: CVE-2021-3613 State: PUBLISHED Published: 2021-07-02T12:33:36 Last Updated: 2024-08-03T17:01:07.446Z Vendors: n/a Products: OpenVPN Connect Problem Types: CWE-427 Description: OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (OpenVPNConnect.exe). Additional Analyst Notes: - CVE Program Container: References: - https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/