deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23381
Published: 2021-04-18
Description: This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://github.com/xudafeng/killing/blob/672ed164ccdd10c0a8fb93c5c6d2456f1dfab781/lib/killing.js%23L62; https://snyk.io/vuln/SNYK-JS-KILLING-1078532; https://github.com/xudafeng/killing/blob/672ed164ccdd10c0a8fb93c5c6d2456f1dfab781/lib/killing.js%23L62
CVE: CVE-2021-29399
Published: 2021-04-19
Description: XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versions of XMB. All XMB installations must be updated to versions 1.9.12.03 or 1.9.11.16.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.xmbforum2.com/index.php?title=Security_Issue_History; https://forums.xmbforum2.com/viewthread.php?tid=777105; https://www.xmbforum2.com/
CVE: CVE-2020-7851
Published: 2021-04-19
Description: Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88, CWE-88
References: https://www.innorix.com/ko/; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35984; https://www.innorix.com/ko/
CVE: CVE-2021-21070
Published: 2021-04-19
Description: Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://helpx.adobe.com/security/products/robohelp/apsb21-20.html; https://helpx.adobe.com/security/products/robohelp/apsb21-20.html
CVE: CVE-2021-20989
Published: 2021-04-19
Description: Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities. This connection can be intercepted using DNS spoofing attack and a device initiated remote port-forward channel can be used to connect to the web management interface. Knowledge of authorization credentials to the management interface is required to perform any further actions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295, CWE-295
References: http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html; http://seclists.org/fulldisclosure/2021/Apr/27; https://www.iot-inspector.com/blog/advisory-fibaro-home-center/
CVE: CVE-2021-20990
Published: 2021-04-19
Description: In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html; http://seclists.org/fulldisclosure/2021/Apr/27; https://www.iot-inspector.com/blog/advisory-fibaro-home-center/
CVE: CVE-2021-20991
Published: 2021-04-19
Description: In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-77
References: http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html; http://seclists.org/fulldisclosure/2021/Apr/27; https://www.iot-inspector.com/blog/advisory-fibaro-home-center/
CVE: CVE-2021-20992
Published: 2021-04-19
Description: In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords.
CVSS Score: 8.1 (HIGH)
CWE: CWE-319, CWE-319
References: http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html; http://seclists.org/fulldisclosure/2021/Apr/27; https://www.iot-inspector.com/blog/advisory-fibaro-home-center/
CVE: CVE-2021-21981
Published: 2021-04-19
Description: VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.vmware.com/security/advisories/VMSA-2021-0006.html; https://www.vmware.com/security/advisories/VMSA-2021-0006.html
CVE: CVE-2020-28141
Published: 2021-04-19
Description: The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/48897; https://www.exploit-db.com/exploits/48897
CVE: CVE-2021-27027
Published: 2021-04-19
Description: An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001; https://www.zerodayinitiative.com/advisories/ZDI-21-469/; https://www.zerodayinitiative.com/advisories/ZDI-21-470/
CVE: CVE-2021-27028
Published: 2021-04-19
Description: A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001; https://www.zerodayinitiative.com/advisories/ZDI-21-465/; https://www.zerodayinitiative.com/advisories/ZDI-21-467/
CVE: CVE-2021-27029
Published: 2021-04-19
Description: The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001; https://www.zerodayinitiative.com/advisories/ZDI-21-464/; https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001
CVE: CVE-2021-27030
Published: 2021-04-19
Description: A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it to run arbitrary code on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001; https://www.zerodayinitiative.com/advisories/ZDI-21-1070/; https://www.zerodayinitiative.com/advisories/ZDI-21-466/
CVE: CVE-2021-27031
Published: 2021-04-19
Description: A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001; https://www.zerodayinitiative.com/advisories/ZDI-21-1069/; https://www.zerodayinitiative.com/advisories/ZDI-21-468/
CVE: CVE-2021-20527
Published: 2021-04-19
Description: IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198759.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198759; https://www.ibm.com/support/pages/node/6444747; https://exchange.xforce.ibmcloud.com/vulnerabilities/198759
CVE: CVE-2021-29434
Published: 2021-04-19
Description: Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the admin interface could thus craft a POST request to publish content with `javascript:` URLs containing arbitrary code. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. See referenced GitHub advisory for additional details, including a workaround. Patched versions have been released as Wagtail 2.11.7 (for the LTS 2.11 branch) and Wagtail 2.12.4 (for the current 2.12 branch).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wagtail/wagtail/security/advisories/GHSA-wq5h-f9p5-q7fx; https://pypi.org/project/wagtail/; https://github.com/wagtail/wagtail/security/advisories/GHSA-wq5h-f9p5-q7fx
CVE: CVE-2021-29453
Published: 2021-04-19
Description: matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media-repo do not properly handle malicious images which are crafted to be small in file size, but large in complexity. A malicious user could upload a relatively small image in terms of file size, using particular image formats, which expands to have extremely large dimensions during the process of thumbnailing. The server can be exhausted of memory in the process of trying to load the whole image into memory for thumbnailing, leading to denial of service. Version 1.2.7 has a fix for the vulnerability.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/turt2live/matrix-media-repo/releases/tag/v1.2.7; https://github.com/turt2live/matrix-media-repo/security/advisories/GHSA-j889-h476-hh9h; https://hub.docker.com/r/turt2live/matrix-media-repo/tags?page=1&ordering=last_updated
CVE: CVE-2021-29455
Published: 2021-04-19
Description: Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people in low-income communities. Grassroot Platform before master deployment as of 2021-04-16 did not properly verify the signature of JSON Web Tokens when refreshing an existing JWT. This allows to forge a valid JWT. The problem has been patched in version 1.3.1 by deprecating the JWT refresh function, which was an overdue deprecation regardless (the "refresh" flow is no longer used).
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://github.com/grassrootza/grassroot-platform/; https://github.com/grassrootza/grassroot-platform/commit/a2e6e885f8183a066d938cf909fd813a7af7d67f; https://github.com/grassrootza/grassroot-platform/security/advisories/GHSA-f65w-6xw8-6734
CVE: CVE-2021-29457
Published: 2021-04-19
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when _writing_ the metadata, which is a less frequently used Exiv2 operation than _reading_ the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://github.com/Exiv2/exiv2/issues/1529; https://github.com/Exiv2/exiv2/pull/1534; https://github.com/Exiv2/exiv2/security/advisories/GHSA-v74w-h496-cgqm
CVE: CVE-2021-29458
Published: 2021-04-19
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/Exiv2/exiv2/issues/1530; https://github.com/Exiv2/exiv2/pull/1536; https://github.com/Exiv2/exiv2/security/advisories/GHSA-57jj-75fm-9rq5
CVE: CVE-2021-31254
Published: 2021-04-19
Description: Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/8986422c21fbd9a7bf6561cae65aae42077447e8; https://github.com/gpac/gpac/issues/1703; https://github.com/gpac/gpac/commit/8986422c21fbd9a7bf6561cae65aae42077447e8
CVE: CVE-2021-31255
Published: 2021-04-19
Description: Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/gpac/gpac/commit/758135e91e623d7dfe7f6aaad7aeb3f791b7a4e5; https://github.com/gpac/gpac/issues/1733; https://github.com/gpac/gpac/commit/758135e91e623d7dfe7f6aaad7aeb3f791b7a4e5
CVE: CVE-2021-31256
Published: 2021-04-19
Description: Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/gpac/gpac/commit/2da2f68bffd51d89b1d272d22aa8cc023c1c066e; https://github.com/gpac/gpac/issues/1705; https://github.com/gpac/gpac/commit/2da2f68bffd51d89b1d272d22aa8cc023c1c066e
CVE: CVE-2021-31257
Published: 2021-04-19
Description: The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/87afe070cd6866df7fe80f11b26ef75161de85e0; https://github.com/gpac/gpac/issues/1734; https://github.com/gpac/gpac/commit/87afe070cd6866df7fe80f11b26ef75161de85e0
CVE: CVE-2021-31258
Published: 2021-04-19
Description: The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/ebfa346eff05049718f7b80041093b4c5581c24e; https://github.com/gpac/gpac/issues/1706; https://github.com/gpac/gpac/commit/ebfa346eff05049718f7b80041093b4c5581c24e
CVE: CVE-2021-31259
Published: 2021-04-19
Description: The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/3b84ffcbacf144ce35650df958432f472b6483f8; https://github.com/gpac/gpac/issues/1735; https://github.com/gpac/gpac/commit/3b84ffcbacf144ce35650df958432f472b6483f8
CVE: CVE-2021-31260
Published: 2021-04-19
Description: The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/df8fffd839fe5ae9acd82d26fd48280a397411d9; https://github.com/gpac/gpac/issues/1736; https://github.com/gpac/gpac/commit/df8fffd839fe5ae9acd82d26fd48280a397411d9
CVE: CVE-2021-31261
Published: 2021-04-19
Description: The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/gpac/gpac/commit/cd3738dea038dbd12e603ad48cd7373ae0440f65; https://github.com/gpac/gpac/issues/1737; https://github.com/gpac/gpac/commit/cd3738dea038dbd12e603ad48cd7373ae0440f65
CVE: CVE-2021-31262
Published: 2021-04-19
Description: The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/b2eab95e07cb5819375a50358d4806a8813b6e50; https://github.com/gpac/gpac/issues/1738; https://github.com/gpac/gpac/commit/b2eab95e07cb5819375a50358d4806a8813b6e50
CVE: CVE-2021-29279
Published: 2021-04-19
Description: There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gf_props_assign_value failed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b; https://github.com/gpac/gpac/issues/1718; https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b
CVE: CVE-2021-30014
Published: 2021-04-19
Description: There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/gpac/gpac/blob/v0.9.0-preview/src/media_tools/av_parsers.c#L6731; https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788; https://github.com/gpac/gpac/issues/1721
CVE: CVE-2021-30015
Published: 2021-04-19
Description: There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a crash in gf_filter_pck_new_alloc_internal.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/13dad7d5ef74ca2e6fe4010f5b03eb12e9bbe0ec; https://github.com/gpac/gpac/issues/1719; https://github.com/gpac/gpac/commit/13dad7d5ef74ca2e6fe4010f5b03eb12e9bbe0ec
CVE: CVE-2021-30019
Published: 2021-04-19
Description: In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size to be smaller than ctx->hdr.hdr_size, resulting in size to be a negative number and a heap overflow in the memcpy.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/22774aa9e62f586319c8f107f5bae950fed900bc; https://github.com/gpac/gpac/issues/1723; https://github.com/gpac/gpac/commit/22774aa9e62f586319c8f107f5bae950fed900bc
CVE: CVE-2021-30020
Published: 2021-04-19
Description: In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788; https://github.com/gpac/gpac/issues/1722; https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788
CVE: CVE-2021-30022
Published: 2021-04-19
Description: There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/gpac/gpac/blob/v0.5.2/src/media_tools/av_parsers.c#L2344; https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788; https://github.com/gpac/gpac/issues/1720
CVE: CVE-2021-30199
Published: 2021-04-19
Description: In filters/reframe_latm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gf_filter_pck_get_data is called. The first arg pck may be null with a crafted mp4 file,which results in a crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/b2db2f99b4c30f96e17b9a14537c776da6cb5dca; https://github.com/gpac/gpac/issues/1728; https://github.com/gpac/gpac/commit/b2db2f99b4c30f96e17b9a14537c776da6cb5dca
CVE: CVE-2020-27240
Published: 2021-04-19
Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE: CVE-2020-27241
Published: 2021-04-19
Description: An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1207
CVE: CVE-2021-3497
Published: 2021-04-19
Description: GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1945339; https://gstreamer.freedesktop.org/security/sa-2021-0002.html; https://lists.debian.org/debian-lts-announce/2021/04/msg00027.html
CVE: CVE-2021-3498
Published: 2021-04-19
Description: GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: http://packetstormsecurity.com/files/162952/Gstreamer-Matroska-Demuxing-Use-After-Free.html; https://bugzilla.redhat.com/show_bug.cgi?id=1945342; https://gstreamer.freedesktop.org/security/sa-2021-0003.html
CVE: CVE-2021-3505
Published: 2021-04-19
Description: A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate(), which is called before the prime number check. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-331
References: https://bugzilla.redhat.com/show_bug.cgi?id=1950046; https://github.com/stefanberger/libtpms/issues/183; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NUCZX4S53TUNTSGTCRDNOQZV2V2RI4RJ/
CVE: CVE-2021-20208
Published: 2021-04-19
Description: A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-266, CWE-269
References: https://bugzilla.redhat.com/show_bug.cgi?id=1921116; https://bugzilla.samba.org/show_bug.cgi?id=14651; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4HSDIWXXNQBUW5ZS37RQMLJ7THK5AS/