Vulnerabilidades do Fedoraproject Fedora

CVE-2021-35477 Média · 5.5 CWE-203 02/08/2021

In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...

In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an attacker-controlled value.

CVE-2021-33910 Média · 5.5 CWE-770 20/07/2021

basic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value...

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

CVE-2021-30554 Alta · 8.8 KEV Alta · 55 CWE-416 02/07/2021

Google Chromium WebGL Use-After-Free Vulnerability

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-36087 Baixa · 3.3 CWE-125 01/07/2021

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called...

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.

CVE-2021-36086 Baixa · 3.3 CWE-416 01/07/2021

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from...

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).

CVE-2021-36085 Baixa · 3.3 CWE-416 01/07/2021

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).

CVE-2021-36084 Baixa · 3.3 CWE-416 01/07/2021

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).

CVE-2021-30551 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 15/06/2021

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-22898 Baixa · 3.1 CWE-909 11/06/2021

curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...

curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.

CVE-2021-31957 Média · 5.9 CWE-400 08/06/2021

ASP.NET Core Denial of Service Vulnerability

CVE-2021-33560 Alta · 7.5 CWE-203 08/06/2021

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

CVE-2021-30533 Média · 6.5 KEV Alta · 53 CWE-863 07/06/2021

Google Chromium PopupBlocker Security Bypass Vulnerability

Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.

CVE-2021-3516 Alta · 7.8 CWE-416 01/06/2021

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.

CVE-2021-29505 Alta · 8.8 Exploit público CWE-502 28/05/2021

XStream is vulnerable to a Remote Command Execution attack

XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.

CVE-2020-25710 Alta · 7.5 CWE-617 28/05/2021

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.

CVE-2021-33574 Crítica · 9.8 CWE-416 25/05/2021

The mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may...

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.

CVE-2021-3426 Média · 5.7 CWE-22 20/05/2021

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.

CVE-2021-3517 Alta · 8.6 CWE-787 19/05/2021

Nokogiri contains libxml Out-of-bounds Write vulnerability

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

CVE-2021-3518 Alta · 8.8 CWE-416 18/05/2021

Nokogiri Implements libxml2 version vulnerable to use-after-free

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

CVE-2021-3537 Média · 5.9 CWE-476 14/05/2021

Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

CVE-2021-31204 Alta · 7.3 CWE-269 11/05/2021

.NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2020-13529 Média · 6.1 CWE-290 10/05/2021

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP...

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

CVE-2021-25317 Baixa · 3.3 CWE-276 05/05/2021

cups: ownership of /var/log/cups allows the lp user to create files as root

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

CVE-2020-36327 Alta · 8.8 29/04/2021

Dependency Confusion in Bundler

Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application. NOTE: it is not correct to use CVE-2021-24105 for every "Dependency Confusion" issue in every product.

CVE-2021-21220 Alta · 8.8 KEV Urgente · 74 Exploit público CWE-787 26/04/2021

Google Chromium V8 Improper Input Validation Vulnerability

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.