deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-27907
Published: 2021-03-05
Description: Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user could inject javascript code executing unwanted action in the context of the user's browser. The javascript code will be automatically executed (Stored XSS) when a legitimate user surfs on the dashboard page. The vulnerability is exploitable creating a “div” section and embedding in it a “svg” element with javascript code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.apache.org/thread.html/r09293fb09f1d617f0d2180c42210e739e2211f8da9bc5c1873bea67a%40%3Cdev.superset.apache.org%3E; https://lists.apache.org/thread.html/r09293fb09f1d617f0d2180c42210e739e2211f8da9bc5c1873bea67a%40%3Cdev.superset.apache.org%3E; https://lists.apache.org/thread.html/r09293fb09f1d617f0d2180c42210e739e2211f8da9bc5c1873bea67a%40%3Cdev.superset.apache.org%3E
CVE: CVE-2021-28026
Published: 2021-03-05
Description: jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://gitlab.com/wg1/jpeg-xl/-/issues/163; https://gitlab.com/wg1/jpeg-xl/-/issues/163
CVE: CVE-2020-29134
Published: 2021-03-05
Description: The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://github.com/lucxssouza/CVE-2020-29134; https://github.com/lucxssouza/CVE-2020-29134/blob/main/README.md; https://systemweakness.com/cve-2020-29134-totvs-fluig-platform-f298ea84b507
CVE: CVE-2021-26960
Published: 2021-03-05
Description: A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a vulnerable system. A successful exploit would consist of an attacker persuading an authorized user to follow a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26961
Published: 2021-03-05
Description: A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a vulnerable system. A successful exploit would consist of an attacker persuading an authorized user to follow a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26962
Published: 2021-03-05
Description: A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to full system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2020-28050
Published: 2021-03-05
Description: Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://www.manageengine.com/products/desktop-central/cve-2020-28050.html; https://www.manageengine.com/products/desktop-central/fixing-multiple-vulnerabilities.html; https://www.manageengine.com/products/desktop-central/cve-2020-28050.html
CVE: CVE-2020-29032
Published: 2021-03-05
Description: Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022
CVSS Score: 8.4 (HIGH)
CWE: CWE-494, CWE-434
References: https://www.secomea.com/support/cybersecurity-advisory/#3737; https://www.tenable.com/security/research/tra-2021-06; https://www.secomea.com/support/cybersecurity-advisory/#3737
CVE: CVE-2020-35594
Published: 2021-03-05
Description: Zoho ManageEngine ADManager Plus before 7066 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com/products/ad-manager/release-notes.html#7066; https://www.manageengine.com/products/ad-manager/release-notes.html#7066
CVE: CVE-2021-21725
Published: 2021-03-05
Description: A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-863
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014624; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014624
CVE: CVE-2021-26963
Published: 2021-03-05
Description: A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to full system compromise.
CVSS Score: 7.2 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26964
Published: 2021-03-05
Description: A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an authenticated remote attacker to improperly access and modify devices and management user details. A successful exploit would consist of an attacker using a lower privileged account to change management user or device details. This could allow the attacker to escalate privileges and/or change network details that they should not have access to.
CVSS Score: 7.1 (HIGH)
CWE: CWE-863
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26965
Published: 2021-03-05
Description: A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26966
Published: 2021-03-05
Description: A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26967
Published: 2021-03-05
Description: A remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of certain components of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the AirWave management interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26968
Published: 2021-03-05
Description: A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26969
Published: 2021-03-05
Description: A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Due to improper restrictions on XML entities a vulnerability exists in the web-based management interface of AirWave. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of service condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26970
Published: 2021-03-05
Description: A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system leading to partial system compromise.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-26971
Published: 2021-03-05
Description: A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system leading to partial system compromise.
CVSS Score: 6.3 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE: CVE-2021-27098
Published: 2021-03-05
Description: In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to distribute. Proper controls are in place to require that the caller presents a valid agent certificate that is already authorized to issue at least one SPIFFE ID, and the requested SPIFFE ID belongs to the same trust domain, prior to being able to trigger this vulnerability. This issue has been fixed in SPIRE versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://github.com/spiffe/spire/security/advisories/GHSA-h746-rm5q-8mgq; https://github.com/spiffe/spire/security/advisories/GHSA-h746-rm5q-8mgq
CVE: CVE-2020-28502
Published: 2021-03-05
Description: This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into xhr.send could result in arbitrary code being injected and run.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://github.com/driverdan/node-XMLHttpRequest/blob/1.6.0/lib/XMLHttpRequest.js%23L480; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1082937; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1082938
CVE: CVE-2021-27099
Published: 2021-03-05
Description: In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issuance of an arbitrary SPIFFE ID within the same trust domain, if the attacker controls the value of an EC2 tag prior to attestation, and the attestor is configured for agent ID templating where the tag value is the last element in the path. This issue has been fixed in SPIRE versions 0.11.3 and 0.12.1
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863
References: https://github.com/spiffe/spire/security/advisories/GHSA-q7gm-mjrg-44h9; https://github.com/spiffe/spire/security/advisories/GHSA-q7gm-mjrg-44h9
CVE: CVE-2021-28038
Published: 2021-03-05
Description: An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://www.openwall.com/lists/oss-security/2021/03/05/1; http://xenbits.xen.org/xsa/advisory-367.html; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2991397d23ec597405b116d96de3813420bdcbc3
CVE: CVE-2021-28039
Published: 2021-03-05
Description: An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has CONFIG_XEN_UNPOPULATED_ALLOC but not CONFIG_XEN_BALLOON_MEMORY_HOTPLUG.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-131
References: http://www.openwall.com/lists/oss-security/2021/03/05/2; http://xenbits.xen.org/xsa/advisory-369.html; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=882213990d32fd224340a4533f6318dd152be4b2
CVE: CVE-2021-28040
Published: 2021-03-05
Description: An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://github.com/ossec/ossec-hids/issues/1953; https://github.com/ossec/ossec-hids/issues/1953
CVE: CVE-2021-26705
Published: 2021-03-05
Description: An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within the application, such as disclosing password hashes.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://www.exploit-db.com/exploits/49621; https://www.exploit-db.com/exploits/49621
CVE: CVE-2021-27254
Published: 2021-03-05
Description: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the apply_save.cgi endpoint. This issue results from the use of hard-coded encryption key. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-12287.
CVSS Score: 8.8 (HIGH)
CWE: CWE-259, CWE-798
References: https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders; https://www.zerodayinitiative.com/advisories/ZDI-21-252/; https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders
CVE: CVE-2021-27255
Published: 2021-03-05
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the refresh_status.aspx endpoint. The issue results from a lack of authentication required to start a service on the server. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12360.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders; https://www.zerodayinitiative.com/advisories/ZDI-21-263/; https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders
CVE: CVE-2021-27256
Published: 2021-03-05
Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rc_service parameter provided to apply_save.cgi. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12355.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders; https://www.zerodayinitiative.com/advisories/ZDI-21-262/; https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders
CVE: CVE-2021-27257
Published: 2021-03-05
Description: This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via FTP. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-12362.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders; https://www.zerodayinitiative.com/advisories/ZDI-21-264/; https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders
CVE: CVE-2020-29020
Published: 2021-03-05
Description: Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284, CWE-863
References: https://www.secomea.com/support/cybersecurity-advisory/#3217; https://www.secomea.com/support/cybersecurity-advisory/#3217
CVE: CVE-2020-29028
Published: 2021-03-05
Description: Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2020-29029
Published: 2021-03-05
Description: Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-79, CWE-79
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2020-29030
Published: 2021-03-05
Description: Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2021-28041
Published: 2021-03-05
Description: ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
CVSS Score: 7.1 (HIGH)
CWE: CWE-415
References: https://github.com/openssh/openssh-portable/commit/e04fd6dde16de1cdc5a4d9946397ff60d96568db; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQWGII3LQR4AOTPPFXGMTYE7UDEWIUKI/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXST2CML2MWY3PNVUXX7FFJE3ATJMNVZ/
CVE: CVE-2021-3377
Published: 2021-03-05
Description: The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://doyensec.com/resources/Doyensec_Advisory_ansi_up4_XSS.pdf; https://github.com/drudru/ansi_up/commit/c8c726ed1db979bae4f257b7fa41775155ba2e27; https://doyensec.com/resources/Doyensec_Advisory_ansi_up4_XSS.pdf
CVE: CVE-2021-3420
Published: 2021-03-05
Description: A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1934088; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEBF6YHWFNCBW5A2ENSQ3Z56ELF4MTRE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AMK54N6UOPBFFX2YT32TWSAEFTHGSKAA/