rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-20237 
An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: zeromq
Published: 2021-05-28T10:42:23.000Z
CVE-2021-20238 
It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint (port 22623) provides ignition configuration used for bootstrapping Nodes and can include some sensitive data, e.g. registry pull secrets. There are two scenarios where this data can be accessed. The first is on Baremetal, OpenStack, Ovirt, Vsphere and KubeVirt deployments which do not have a separate internal API endpoint and allow access from outside the cluster to port 22623 from the standard OpenShift API Virtual IP address. The second is on cloud deployments when using unsupported network plugins, which do not create iptables rules that prevent to port 22623. In this scenario, the ignition config is exposed to all pods within the cluster and cannot be accessed externally.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: openshift/machine-config-operator
Published: 2022-04-01T22:17:25.000Z
CVE-2021-20239 
A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.
Problem types: cwe_id: CWE-822
description: CWE-822->CWE-200
Affected products: vendor: n/a
product: kernel
Published: 2021-05-28T10:42:29.000Z
CVE-2021-20240 
A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-191
description: CWE-191->CWE-787
Affected products: vendor: n/a
product: gdk-pixbuf
Published: 2021-05-28T10:42:35.000Z
CVE-2021-20241 
A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-369
description: CWE-369
Affected products: vendor: n/a
product: ImageMagick
Published: 2021-03-09T00:00:00.000Z
CVE-2021-20243 
A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-369
description: CWE-369
Affected products: vendor: n/a
product: ImageMagick
Published: 2021-03-09T00:00:00.000Z
CVE-2021-20244 
A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-369
description: CWE-369
Affected products: vendor: n/a
product: ImageMagick
Published: 2021-03-09T00:00:00.000Z
CVE-2021-20245 
A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-369
description: CWE-369
Affected products: vendor: n/a
product: ImageMagick
Published: 2021-03-09T00:00:00.000Z
CVE-2021-20246 
A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-369
description: CWE-369
Affected products: vendor: n/a
product: ImageMagick
Published: 2021-03-09T00:00:00.000Z
CVE-2021-20247 
A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the opposite end of the synchronization channel. The highest threat from this vulnerability is to data confidentiality and integrity.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-22
Affected products: vendor: n/a
product: isync/mbsync
Published: 2021-02-23T18:45:29.000Z
CVE-2021-20250 
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: wildfly
Published: 2021-05-13T13:35:25.000Z
CVE-2021-20251 
A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.
Problem types: cwe_id: CWE-362
description: CWE-362
Affected products: vendor: n/a
product: samba
Published: 2023-03-06T00:00:00.000Z
CVE-2021-20252 
A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested date ranges in certain queries allowing a malicious authenticated user to submit a request with a sufficiently large date range to eventually yield an internal server error resulting in denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: 3scale/backend
Published: 2021-02-23T22:24:50.000Z
CVE-2021-20253 
A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-552
description: CWE-552
Affected products: vendor: n/a
product: ansible-tower
Published: 2021-03-09T17:14:28.000Z
CVE-2021-20254 
A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: samba
Published: 2021-05-05T13:36:32.000Z
CVE-2021-20255 
A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-835
description: CWE-835
Affected products: vendor: n/a
product: QEMU
Published: 2021-03-09T19:14:05.000Z
CVE-2021-20256 
A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: Red Hat Satellite
Published: 2021-02-23T22:31:21.000Z
CVE-2021-20257 
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-835
description: CWE-835
Affected products: vendor: n/a
product: QEMU
Published: 2022-03-16T14:12:26.000Z
CVE-2021-20259 
A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Versions before foreman_fog_proxmox 0.13.1 are affected
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: foreman
Published: 2021-06-07T20:31:37.000Z
CVE-2021-20260 
A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-200
description: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: foreman
Published: 2022-08-26T15:25:39.000Z
CVE-2021-20261 
A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricted to root. If the permissions on the device have changed the impact changes greatly. In the default configuration root (or equivalent) permissions are required to attack this flaw.
Problem types: cwe_id: CWE-362
description: CWE-362
Affected products: vendor: n/a
product: kernel
Published: 2021-03-11T20:10:40.000Z
CVE-2021-20262 
A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-306
description: CWE-306
Affected products: vendor: n/a
product: keycloak
Published: 2021-03-09T17:19:20.000Z
CVE-2021-20263 
A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the 'security.capability' xattr in the guest to not drop on file write, potentially leading to a modified, privileged executable in the guest. In rare circumstances, this flaw could be used by a malicious user to elevate their privileges within the guest.
Problem types: cwe_id: CWE-281
description: CWE-281
Affected products: vendor: n/a
product: QEMU
Published: 2021-03-09T17:17:43.000Z
CVE-2021-20264 
An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: n/a
product: containers/openjdk
Published: 2021-10-06T15:12:05.000Z
CVE-2021-20265 
A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: kernel
Published: 2021-03-10T15:30:18.000Z
CVE-2021-20266 
A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: rpm
Published: 2021-04-30T11:22:49.000Z
CVE-2021-20267 
A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations. Only deployments using the Open vSwitch driver are affected. Source: OpenStack project. Versions before openstack-neutron 15.3.3, openstack-neutron 16.3.1 and openstack-neutron 17.1.1 are affected.
Problem types: cwe_id: CWE-345
description: CWE-345
Affected products: vendor: n/a
product: openstack-neutron
Published: 2021-05-28T18:46:11.000Z
CVE-2021-20268 
An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: kernel
Published: 2021-03-09T17:16:14.000Z
CVE-2021-20269 
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.
Problem types: cwe_id: CWE-276
description: CWE-276
Affected products: vendor: n/a
product: kexec-tools
Published: 2022-03-09T16:29:47.000Z
CVE-2021-20270 
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
Problem types: cwe_id: CWE-835
description: CWE-835
Affected products: vendor: n/a
product: python-pygments
Published: 2021-03-23T16:40:22.000Z
CVE-2021-20271 
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability.
Problem types: cwe_id: CWE-345
description: CWE-345
Affected products: vendor: n/a
product: rpm
Published: 2021-03-26T00:00:00.000Z
CVE-2021-20272 
A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash.
Problem types: cwe_id: CWE-617
description: CWE-617
Affected products: vendor: n/a
product: privoxy
Published: 2021-03-09T13:10:39.000Z
CVE-2021-20273 
A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: privoxy
Published: 2021-03-09T13:11:17.000Z
CVE-2021-20274 
A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: privoxy
Published: 2021-03-09T13:11:46.000Z
CVE-2021-20275 
A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: privoxy
Published: 2021-03-09T13:12:05.000Z
CVE-2021-20276 
A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: privoxy
Published: 2021-03-09T13:12:35.000Z
CVE-2021-20277 
A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: samba
Published: 2021-05-12T13:54:05.000Z
CVE-2021-20278 
An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying cluster. When OpenID `implicit flow` is used with RBAC turned off, this token validation doesn't occur, and this allows a malicious user to bypass the authentication.
Problem types: cwe_id: CWE-290
description: CWE-290
Affected products: vendor: n/a
product: kiali
Published: 2021-05-28T10:42:40.000Z
CVE-2021-20279 
The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: n/a
product: moodle
Published: 2021-03-15T21:35:37.000Z
CVE-2021-20280 
Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: n/a
product: moodle
Published: 2021-03-15T21:35:44.000Z
CVE-2021-20281 
It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: moodle
Published: 2021-03-15T21:35:50.000Z
CVE-2021-20282 
When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: n/a
product: moodle
Published: 2021-03-15T21:35:56.000Z
CVE-2021-20283 
The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: n/a
product: moodle
Published: 2021-03-15T21:36:11.000Z
CVE-2021-20284 
A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: binutils
Published: 2021-03-26T16:39:03.000Z
CVE-2021-20285 
A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: upx
Published: 2021-03-26T16:35:14.000Z
CVE-2021-20286 
A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.
Problem types: cwe_id: CWE-617
description: CWE-617
Affected products: vendor: n/a
product: libnbd
Published: 2021-03-15T17:38:46.000Z
CVE-2021-20288 
An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who can request a global_id can exploit the ability of any user to request a global_id previously associated with another user, as ceph does not force the reuse of old keys to generate new ones. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: ceph
Published: 2021-04-15T00:00:00.000Z
CVE-2021-20289 
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-209
description: CWE-209
Affected products: vendor: n/a
product: resteasy
Published: 2021-03-26T16:28:44.000Z
CVE-2021-20290 
An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: n/a
product: smart_proxy_openscap
Published: 2022-03-25T18:02:47.000Z
CVE-2021-20291 
A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS).
Problem types: cwe_id: CWE-667
description: CWE-667
Affected products: vendor: n/a
product: containers/storage
Published: 2021-04-01T17:49:40.000Z
CVE-2021-20292 
There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: kernel
Published: 2021-05-28T10:42:44.000Z