Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,386

Export CSV
CVE-2021-3571

linuxptp: wrong length of one-step follow-up in transparent clock

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.

CVSS 3.1 · 7.1 High EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Linuxptp Project Redhat
Products
Fedora Linuxptp Enterprise Linux
CVE-2021-3570

linuxptp: missing length check of forwarded messages

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

CVSS 3.1 · 8.8 High EPSS 3.0% KEV · Not listed
Vendors
Debian Fedoraproject Linuxptp Project and 1 more
Products
Debian Linux Fedora Linuxptp and 5 more
CVE-2021-3565

tpm2-tools: fixed AES wrapping key in tpm2_import

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality.

CVSS 3.1 · 5.9 Medium EPSS 1.3% KEV · Not listed
Vendors
Fedoraproject Redhat Tpm2-tools Project
Products
Fedora Enterprise Linux Tpm2-tools
CVE-2021-3564

kernel: double free in bluetooth subsystem when the HCI device initialization fails

A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 1 more
Products
Debian Linux Fedora Linux Kernel and 2 more
CVE-2021-3561

fig2dev: Global buffer overflow in fig2dev/read.c in function read_objects

An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS 3.1 · 7.1 High EPSS 1.2% KEV · Not listed
Vendors
Debian Fedoraproject Fig2dev Project
Products
Debian Linux Fedora Fig2dev
CVE-2021-3551

pki-server: Dogtag installer "pkispawn" logs admin credentials into a world-readable log file

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Fedoraproject Oracle and 1 more
Products
Dogtagpki Fedora Linux and 9 more
CVE-2021-3543

kernel: nitro_enclaves stale file descriptors on failed usercopy

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Nitro Enclaves Project Redhat
Products
Fedora Nitro Enclaves Enterprise Linux
CVE-2021-3531

ceph: RGW unauthenticated denial of service

A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.

CVSS 3.1 · 5.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora Ceph Ceph Storage
CVE-2021-3524

gateway: radosgw: CRLF injection

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Fedoraproject Redhat
Products
Debian Linux Fedora Ceph and 1 more
CVE-2021-3505

libtpms: RSA keys weaker than expected

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate(), which is called before the prime number check. The highest threat from this vulnerability is to data confidentiality.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Libtpms Project Redhat
Products
Fedora Libtpms Enterprise Linux
CVE-2021-3504

hivex: Buffer overflow when provided invalid node key length

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.4 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Fedoraproject Redhat
Products
Debian Linux Fedora Enterprise Linux and 1 more
CVE-2021-3501

kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32 GB from vcpu->run

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Netapp and 1 more
Products
Fedora Linux Kernel Cloud Backup and 25 more
CVE-2021-3482

exiv2: Heap-based buffer overflow in Jp2Image::readMetadata()

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Exiv2 Fedoraproject and 1 more
Products
Debian Linux Exiv2 Fedora and 1 more
CVE-2021-3480

slapi-nis: NULL dereference (DoS) with specially crafted Binding DN

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Fedoraproject Redhat Slapi-nis Project
Products
Fedora Enterprise Linux Rhel Eus and 1 more
CVE-2021-3472

xorg-x11-server: XChangeFeedbackControl integer underflow leads to privilege escalation

A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Enterprise Linux and 1 more
CVE-2021-3467

jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Jasper Project
Products
Fedora Jasper
CVE-2021-3466

libmicrohttpd: Buffer overflow issue in URL parser in the post_process_urlencoded function

A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Only version 0.9.70 is vulnerable.

CVSS 3.1 · 9.8 Critical EPSS 8.7% KEV · Not listed
Vendors
Fedoraproject Gnu Redhat
Products
Fedora Libmicrohttpd Enterprise Linux
CVE-2021-3447

ansible: multiple modules expose secured values

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take advantage of this information to steal those credentials, provided when they have access to the log files containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora Ansible Ansible Automation Platform and 4 more
CVE-2021-3446

libtpms: return of wrong initialization vector when certain symmetric ciphers are used

A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Libtpms Project Redhat
Products
Fedora Libtpms Enterprise Linux
CVE-2021-3445

libdnf: Signature verification bypass via signature placed in the main RPM header

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Fedoraproject Redhat Rpm
Products
Fedora Enterprise Linux Libdnf