Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20287 State: REJECTED Published: 2022-08-25T17:22:48 Last Updated: 2022-08-25T17:22:48 Description: No description available.
CVE ID: CVE-2021-20288 State: PUBLISHED Published: 2021-04-15T00:00:00 Last Updated: 2024-08-03T17:37:22.742Z Vendors: n/a Products: ceph Problem Types: CWE-287 Description: An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who can request a global_id can exploit the ability of any user to request a global_id previously associated with another user, as ceph does not force the reuse of old keys to generate new ones. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst N
at from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1938031 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/362CEPPYF3YMJZBEJQUT3KDE2EHYYIYQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BPIAYTRCWAU4XWCDBK2THEFVXSC4XGK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVWUKUUS5BCIFWRV3JCUQMAPJ4HIWSED/ - https://security.gentoo.org/glsa/202105-39 - https://lists.debian.org/debian-lts-a
e/JVWUKUUS5BCIFWRV3JCUQMAPJ4HIWSED/ - https://security.gentoo.org/glsa/202105-39 - https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
CVE ID: CVE-2021-20289 State: PUBLISHED Published: 2021-03-26T16:28:44 Last Updated: 2024-08-03T17:37:23.769Z Vendors: n/a Products: resteasy Problem Types: CWE-209 Description: A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1935927 - https://www.oracle.com/security-alerts/cpu
ontainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1935927 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2021-20290 State: PUBLISHED Published: 2022-03-25T18:02:47 Last Updated: 2024-08-03T17:37:23.534Z Vendors: n/a Products: smart_proxy_openscap Problem Types: CWE-863 Description: An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.
grity and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939701
CVE ID: CVE-2021-20291 State: PUBLISHED Published: 2021-04-01T17:49:40 Last Updated: 2024-08-03T17:37:23.517Z Vendors: n/a Products: containers/storage Problem Types: CWE-667 Description: A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, wou
lnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939485 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5D7XL7FL24TWFMGQ3K2S72EOUSLZMKL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNMB7O2UIXE34PGSCSOULGHPX5LIJBMM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WX24EITRXVHDM5M223BVTJA2ODF2FSHI/ -
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WX24EITRXVHDM5M223BVTJA2ODF2FSHI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPYOHNG2Q7DCAQZMGYLMENLKALGDLG3X/ - https://unit42.paloaltonetworks.com/cve-2021-20291/
CVE ID: CVE-2021-20292 State: PUBLISHED Published: 2021-05-28T10:42:44 Last Updated: 2024-08-03T17:37:23.604Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.
te code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939686 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
CVE ID: CVE-2021-20293 State: PUBLISHED Published: 2021-06-10T11:09:47 Last Updated: 2024-08-03T17:37:24.125Z Vendors: n/a Products: RESTEasy Problem Types: CWE-79 Description: A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1942819 - https://security.netapp.com/
CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1942819 - https://security.netapp.com/advisory/ntap-20210727-0005/
CVE ID: CVE-2021-20294 State: PUBLISHED Published: 2021-04-29T00:00:00 Last Updated: 2024-08-03T17:37:23.624Z Vendors: n/a Products: binutils Problem Types: CWE-787 Description: A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1943533 - https://sourceware.org/bugzilla/show_bug.cgi?id=26929 - https://lists.apache.org/th
redhat.com/show_bug.cgi?id=1943533 - https://sourceware.org/bugzilla/show_bug.cgi?id=26929 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://security.gentoo.org/glsa/202208-30 - https://sourceware.org/git/?p=binutils-gdb.git%3Ba=patch%3Bh=372dd157272e0674d13372655cc60eaca9c06926
CVE ID: CVE-2021-20295 State: PUBLISHED Published: 2022-04-01T22:17:46 Last Updated: 2024-08-03T17:37:23.711Z Vendors: n/a Products: QEMU Problem Types: CWE-125 Description: It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059). CVE-2021-20295 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-202
95 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-2020-10756, refer to bug 1835986 or the CVE page: https://access.redhat.com/security/cve/CVE-2020-10756. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1944075 - https://access.redhat.com/security/cve/CVE-2020-10756 - https://security.netapp.com/advisory/ntap-20220519-0003/
CVE ID: CVE-2021-20296 State: PUBLISHED Published: 2021-04-01T00:00:00 Last Updated: 2024-08-03T17:37:23.528Z Vendors: n/a Products: OpenEXR Problem Types: CWE-476 Description: A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939141 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854 - https://lists.debian.org/debian-lts-annou
cgi?id=1939141 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854 - https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html - https://security.gentoo.org/glsa/202107-27 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-20297 State: PUBLISHED Published: 2021-05-26T20:46:59 Last Updated: 2024-08-03T17:37:23.647Z Vendors: n/a Products: NetworkManager Problem Types: CWE-20 Description: A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1943282
CVE ID: CVE-2021-20298 State: PUBLISHED Published: 2022-08-23T00:00:00 Last Updated: 2024-08-03T17:37:23.785Z Vendors: n/a Products: OpenEXR Problem Types: CWE-400 Description: A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25913 - https://github.com/AcademySoftwareFoundation/openexr/pull/843 - https://github.com/AcademySoftwareFoundation/openexr/commit/85fd638ae0d5fa132
ademySoftwareFoundation/openexr/pull/843 - https://github.com/AcademySoftwareFoundation/openexr/commit/85fd638ae0d5fa132434f4cbf32590261c1dba97 - https://bugzilla.redhat.com/show_bug.cgi?id=1939156 - https://access.redhat.com/security/cve/CVE-2021-20298 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-20299 State: PUBLISHED Published: 2022-03-16T00:00:00 Last Updated: 2024-08-03T17:37:23.881Z Vendors: n/a Products: OpenEXR Problem Types: CWE-476 Description: A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25740 - https://github.com/AcademySoftwareFoundation/openexr/commit/25e9515b06a6bc293d871622b8cafaee7af84e0f - https://bugzilla.redhat.com/show_bug.cgi?id=1939154 - https://li
enexr/commit/25e9515b06a6bc293d871622b8cafaee7af84e0f - https://bugzilla.redhat.com/show_bug.cgi?id=1939154 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-20300 State: PUBLISHED Published: 2022-03-04T00:00:00 Last Updated: 2024-08-03T17:37:23.704Z Vendors: n/a Products: OpenEXR Problem Types: CWE-190 Description: A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939153 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25562 - https://github.com/AcademySoftwareFoundation/openexr/pull/836 -
://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25562 - https://github.com/AcademySoftwareFoundation/openexr/pull/836 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-20301 State: REJECTED Published: 2022-08-25T17:22:31 Last Updated: 2022-08-25T17:22:31 Description: No description available.
CVE ID: CVE-2021-20302 State: PUBLISHED Published: 2022-03-04T00:00:00 Last Updated: 2024-08-03T17:37:23.828Z Vendors: n/a Products: OpenEXR Problem Types: CWE-20 Description: A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939161 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25894 - https://github.com/AcademySoftwareFoundation/openexr/pull/842 -
//bugs.chromium.org/p/oss-fuzz/issues/detail?id=25894 - https://github.com/AcademySoftwareFoundation/openexr/pull/842 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-20303 State: PUBLISHED Published: 2022-03-04T00:00:00 Last Updated: 2024-08-03T17:37:23.668Z Vendors: n/a Products: OpenEXR Problem Types: CWE-190 Description: A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to application availability, with some potential impact to data integrity as well. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1939151 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=
ferences: - https://bugzilla.redhat.com/show_bug.cgi?id=1939151 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25505 - https://github.com/AcademySoftwareFoundation/openexr/pull/831 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-20304 State: PUBLISHED Published: 2022-08-23T00:00:00 Last Updated: 2024-08-03T17:37:23.947Z Vendors: n/a Products: OpenEXR Problem Types: CWE-190 Description: A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26229 - https://github.com/AcademySoftwareFoundation/openexr/pull/849 - https://github.com/AcademySoftwareFoundation/openexr/commit/51a92d67f53c0823073
emySoftwareFoundation/openexr/pull/849 - https://github.com/AcademySoftwareFoundation/openexr/commit/51a92d67f53c08230734e74564c807043cbfe41e - https://bugzilla.redhat.com/show_bug.cgi?id=1939157 - https://access.redhat.com/security/cve/CVE-2021-20304 - https://security.gentoo.org/glsa/202210-31
CVE ID: CVE-2021-20305 State: PUBLISHED Published: 2021-04-05T21:31:06 Last Updated: 2024-08-03T17:37:23.808Z Vendors: n/a Products: nettle Problem Types: CWE-327 Description: A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst
ighest threat to this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1942533 - https://security.gentoo.org/glsa/202105-31 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQKWVVMAIDAJ7YAA3VVO32BHLDOH2E63/ - https://www.debian.org/security/2021/dsa-4933 - https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html - https://security.netapp.com/advisory/ntap-20211022-0002/
CVE ID: CVE-2021-20306 State: PUBLISHED Published: 2021-06-01T13:38:07 Last Updated: 2024-08-03T17:37:23.673Z Vendors: n/a Products: Business-central Problem Types: CWE-863 Description: A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1946213
CVE ID: CVE-2021-20307 State: PUBLISHED Published: 2021-04-05T21:34:23 Last Updated: 2024-08-03T17:37:23.668Z Vendors: n/a Products: libpano13 Problem Types: CWE-134 Description: Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/panotools/files/libpano13/libpano13-2.9.20/ - https://bugzilla.redhat.com/show_bug.cgi?id=1946284 - https://lists.debian.org/debian-lts-announce/2021/04/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JE6
/04/msg00010.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JE6YZSXNVD6WZ3AG3ENL2DIHQFF24LYX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VYDYBKHT2MNMQCUMAVJNZW4VH6MD5BOF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVJRXUOBN56ZWP6QQ3NTA6DIFZMDZAEQ/ - https://security.gentoo.org/glsa/202107-47
CVE ID: CVE-2021-20308 State: PUBLISHED Published: 2021-04-05T21:32:58 Last Updated: 2024-08-03T17:37:23.687Z Vendors: n/a Products: htmldoc Problem Types: CWE-190 Description: Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/423 - https://bugzilla.redhat.com/show_bug.cgi?id=1946289 - https://lists.debian.org/debian-lts-announce/2021/07/msg00000.html
CVE ID: CVE-2021-20309 State: PUBLISHED Published: 2021-05-11T00:00:00 Last Updated: 2024-08-03T17:37:23.626Z Vendors: n/a Products: ImagemMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1946722 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https://l
illa.redhat.com/show_bug.cgi?id=1946722 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2021-20310 State: PUBLISHED Published: 2021-05-11T22:30:40 Last Updated: 2024-08-03T17:37:23.635Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1946728
CVE ID: CVE-2021-20311 State: PUBLISHED Published: 2021-05-11T22:30:47 Last Updated: 2024-08-03T17:37:23.623Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1946739
CVE ID: CVE-2021-20312 State: PUBLISHED Published: 2021-05-11T00:00:00 Last Updated: 2024-08-03T17:37:23.585Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1946742 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html
ttps://bugzilla.redhat.com/show_bug.cgi?id=1946742 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2021-20313 State: PUBLISHED Published: 2021-05-11T00:00:00 Last Updated: 2024-08-03T17:37:23.807Z Vendors: n/a Products: ImageMagick Problem Types: CWE-200 Description: A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1947019 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html