deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-21167
Published: 2021-03-09
Description: Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1161144; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21168
Published: 2021-03-09
Description: Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1152226; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21169
Published: 2021-03-09
Description: Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1166138; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21170
Published: 2021-03-09
Description: Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1111646; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21171
Published: 2021-03-09
Description: Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1152894; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21172
Published: 2021-03-09
Description: Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
CVSS Score: 8.1 (HIGH)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1150810; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21173
Published: 2021-03-09
Description: Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-203
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1154250; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21174
Published: 2021-03-09
Description: Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1158010; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21175
Published: 2021-03-09
Description: Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1146651; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21176
Published: 2021-03-09
Description: Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1170584; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21177
Published: 2021-03-09
Description: Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1173879; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21178
Published: 2021-03-09
Description: Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1174186; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21179
Published: 2021-03-09
Description: Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1174943; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21180
Published: 2021-03-09
Description: Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1175507; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21181
Published: 2021-03-09
Description: Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-203
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1182767; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21182
Published: 2021-03-09
Description: Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1049265; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21183
Published: 2021-03-09
Description: Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1105875; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21184
Published: 2021-03-09
Description: Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1131929; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21185
Published: 2021-03-09
Description: Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension.
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1100748; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21186
Published: 2021-03-09
Description: Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1153445; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21187
Published: 2021-03-09
Description: Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1155516; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21188
Published: 2021-03-09
Description: Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1161739; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21189
Published: 2021-03-09
Description: Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1165392; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21190
Published: 2021-03-09
Description: Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html; https://crbug.com/1166091; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
CVE: CVE-2021-21369
Published: 2021-03-09
Description: Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 there is a denial-of-service vulnerability involving the HTTP JSON-RPC API service. If username and password authentication is enabled for the HTTP JSON-RPC API service, then prior to making any requests to an API endpoint the requestor must use the login endpoint to obtain a JSON web token (JWT) using their credentials. A single user can readily overload the login endpoint with invalid requests (incorrect password). As the supplied password is checked for validity on the main vertx event loop and takes a relatively long time this can cause the processing of other valid requests to fail. A valid username is required for this vulnerability to be exposed. This has been fixed in version 1.5.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/hyperledger/besu/blob/master/CHANGELOG.md#151; https://github.com/hyperledger/besu/commit/06e35a58c07a30c0fbdc0aae45a3e8b06b53c022; https://github.com/hyperledger/besu/pull/1144
CVE: CVE-2020-27225
Published: 2021-03-09
Description: In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306, CWE-306
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=569855; https://bugs.eclipse.org/bugs/show_bug.cgi?id=569855
CVE: CVE-2021-20244
Published: 2021-03-09
Description: A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://bugzilla.redhat.com/show_bug.cgi?id=1928959; https://github.com/ImageMagick/ImageMagick/pull/3194; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html
CVE: CVE-2021-20245
Published: 2021-03-09
Description: A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://bugzilla.redhat.com/show_bug.cgi?id=1928943; https://github.com/ImageMagick/ImageMagick/issues/3176; https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html
CVE: CVE-2021-20246
Published: 2021-03-09
Description: A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://bugzilla.redhat.com/show_bug.cgi?id=1928941; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE: CVE-2021-21295
Published: 2021-03-09
Description: Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling. In a proxy case, users may assume the content-length is validated somehow, which is not the case. If the request is forwarded to a backend channel that is a HTTP/1.1 connection, the Content-Length now has meaning and needs to be checked. An attacker can smuggle requests inside the body as it gets downgraded from HTTP/2 to HTTP/1.1. For an example attack refer to the linked GitHub Advisory. Users are only affected if all of this is true: `HTTP2MultiplexCodec` or `Http2FrameCodec` is used, `Http2StreamFrameToHttpObjectCodec` is used to convert to HTTP/1.1 objects, and these HTTP/1.1 objects are forwarded to another remote peer. This has been patched in 4.1.60.Final As a workaround, the user can do the validation by themselves by implementing a custom `ChannelInboundHandler` that is put in the `ChannelPipeline` behind `Http2StreamFrameToHttpObjectCodec`.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://github.com/Netflix/zuul/pull/980; https://github.com/netty/netty/commit/89c241e3b1795ff257af4ad6eadc616cb2fb3dc4; https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj
CVE: CVE-2021-23352
Published: 2021-03-09
Description: This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image(), .svg() or .dot() functions are called, is executed by the childprocess.exec function.
CVSS Score: 8.6 (HIGH)
CWE: CWE-89
References: https://github.com/pahen/madge/blob/master/lib/graph.js%23L27; https://github.com/pahen/madge/commit/da5cbc9ab30372d687fa7c324b22af7ffa5c6332; https://snyk.io/vuln/SNYK-JS-MADGE-1082875
CVE: CVE-2021-23353
Published: 2021-03-09
Description: This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.
CVSS Score: 5.9 (MEDIUM)
References: https://github.com/MrRio/jsPDF/commit/d8bb3b39efcd129994f7a3b01b632164144ec43e; https://github.com/MrRio/jsPDF/pull/3091; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1083289
CVE: CVE-2020-28952
Published: 2021-03-09
Description: An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely known key that is designed for testing purposes: "[PII_REDACTED]0b0d0f[PII_REDACTED]0a0c0d" (the decimal equivalent of 1 3 5 7 9 11 13 15 0 2 4 6 8 10 12 13), which is human generated and static across all issued devices.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://developer.athom.com/firmware; https://homey.app/en-us/; https://yougottahackthat.com/blog/1260/athom-homey-security-static-and-well-known-keys-cve-2020-28952
CVE: CVE-2020-35521
Published: 2021-03-09
Description: A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1932034; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMHBYFMX3D5VGR6Y3RXTTH3Q4NF4E6IG/; https://security.gentoo.org/glsa/202104-06
CVE: CVE-2020-35522
Published: 2021-03-09
Description: In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1932037; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMHBYFMX3D5VGR6Y3RXTTH3Q4NF4E6IG/; https://security.gentoo.org/glsa/202104-06
CVE: CVE-2020-35523
Published: 2021-03-09
Description: An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1932040; https://gitlab.com/libtiff/libtiff/-/commit/c8d613ef497058fe653c467fc84c70a62a4a71b2; https://gitlab.com/libtiff/libtiff/-/merge_requests/160
CVE: CVE-2020-35524
Published: 2021-03-09
Description: A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1932044; https://gitlab.com/libtiff/libtiff/-/merge_requests/159; https://gitlab.com/rzkn/libtiff/-/commit/7be2e452ddcf6d7abca88f41d3761e6edab72b22
CVE: CVE-2021-20255
Published: 2021-03-09
Description: A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-674
References: https://bugzilla.redhat.com/show_bug.cgi?id=1930646; https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html; https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Feepro100_stackoverflow1
CVE: CVE-2021-21300
Published: 2021-03-09
Description: Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive file system such as NTFS, HFS+ or APFS (i.e. the default file systems on Windows and macOS). Note that clean/smudge filters have to be configured for that. Git for Windows configures Git LFS by default, and is therefore vulnerable. The problem has been patched in the versions published on Tuesday, March 9th, 2021. As a workaound, if symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. Likewise, if no clean/smudge filters such as Git LFS are configured globally (i.e. _before_ cloning), the attack is foiled. As always, it is best to avoid cloning repositories from untrusted sources. The earliest impacted version is 2.14.2. The fix versions are: 2.30.1, 2.29.3, 2.28.1, 2.27.1, 2.26.3, 2.25.5, 2.24.4, 2.23.4, 2.22.5, 2.21.4, 2.20.5, 2.19.6, 2.18.5, 2.17.62.17.6.
CVSS Score: 8.0 (HIGH)
CWE: CWE-59, CWE-59
References: http://packetstormsecurity.com/files/163978/Git-LFS-Clone-Command-Execution.html; http://seclists.org/fulldisclosure/2021/Apr/60; http://www.openwall.com/lists/oss-security/2021/03/09/3
CVE: CVE-2021-3411
Published: 2021-03-09
Description: A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a padding of int3 in the linking state. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94, CWE-94
References: http://blog.pi3.com.pl/?p=831; https://bugzilla.redhat.com/show_bug.cgi?id=1928236; http://blog.pi3.com.pl/?p=831