Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3,250

Export CSV
CVE-2021-4203

kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses

A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.

CVSS 3.1 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Linux Netapp Oracle and 1 more
Products
Linux Kernel A700s A700s Firmware and 22 more
CVE-2021-4197

kernel: cgroup: Use open-time creds and namespace for migration perm checks

An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Broadcom Debian Linux and 3 more
Products
Brocade Fabric Operating System Firmware Debian Linux Linux Kernel and 13 more
CVE-2021-4155

kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Aus and 6 more
CVE-2021-4154

kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel Hci Baseboard Management Controller Enterprise Linux and 3 more
CVE-2021-4083

kernel: fget: check that the fd still exists after getting a ref to it

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Debian Linux Netapp and 2 more
Products
Debian Linux Linux Kernel H300e and 27 more
CVE-2021-4028

kernel: use-after-free in RDMA listen()

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat Suse
Products
Linux Kernel Enterprise Linux Rhel Aus and 6 more
CVE-2021-46784

squid: DoS when processing gopher server responses

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

CVSS 3.1 · 6.5 Medium EPSS 5.1% KEV · Not listed
Vendors
Debian Redhat Squid-cache
Products
Debian Linux Enterprise Linux Rhel E4s and 2 more
CVE-2021-46666

mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mariadb Redhat
Products
Mariadb Enterprise Linux Rhel Eus and 1 more
CVE-2021-46662

mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries

MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mariadb Redhat
Products
Mariadb Enterprise Linux Rhel Eus and 1 more
CVE-2021-46658

mariadb: save_window_function_values triggers an abort during IN subquery

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mariadb Redhat
Products
Mariadb Enterprise Linux Rhel Eus and 1 more
CVE-2021-46657

mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mariadb Redhat
Products
Mariadb Enterprise Linux Rhel Eus and 1 more
CVE-2021-45485

kernel: information leak in the IPv6 implementation

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Linux Netapp Oracle and 1 more
Products
Linux Kernel Aff A400 Aff A400 Firmware and 43 more
CVE-2021-45417

aide: heap-based buffer overflow on outputs larger than B64_BUF

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Advanced Intrusion Detection Environment Project Canonical Debian and 2 more
Products
Advanced Intrusion Detection Environment Ubuntu Linux Debian Linux and 8 more
CVE-2021-44964

lua: use after free allows Sandbox Escape

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Lua Redhat
Products
Lua Enterprise Linux Rhel Eus
CVE-2021-44716

golang: net/http: limit growth of header canonicalization cache

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Debian Golang Netapp and 1 more
Products
Debian Linux Go Cloud Insights Telegraf and 13 more
CVE-2021-44227

mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover

In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Gnu Redhat
Products
Debian Linux Mailman Enterprise Linux and 2 more
CVE-2021-43546

Mozilla: Cursor spoofing could overlay user interface when native cursor is zoomed

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CVSS 3.1 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Mozilla Redhat
Products
Debian Linux Firefox Firefox Esr and 4 more
CVE-2021-43545

Mozilla: Denial of Service when using the Location API in a loop

Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Debian Mozilla Redhat
Products
Debian Linux Firefox Firefox Esr and 4 more