Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 72

Export CSV
CVE-2021-41772

golang: archive/zip: Reader.Open panics on empty string

Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Fedoraproject Golang Oracle and 1 more
Products
Fedora Go Timesten In-memory Database and 5 more
CVE-2021-34558

golang: crypto/tls: certificate of wrong type is causing TLS client to panic

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.

CVSS 3.1 · 6.5 Medium EPSS 7.0% KEV · Not listed
Vendors
Fedoraproject Golang Netapp and 2 more
Products
Fedora Go Cloud Insights Telegraf and 16 more
CVE-2021-33197

golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.

CVSS 3.1 · 5.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Golang Redhat
Products
Go Advanced Cluster Security Container Native Virtualization and 8 more
CVE-2021-33196

golang: archive/zip: malformed archive may cause panic or memory exhaustion

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Debian Golang Redhat
Products
Debian Linux Go Devtools and 5 more
CVE-2021-33195

golang: net: lookup functions may return invalid host names

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

CVSS 3.1 · 7.3 High EPSS 3.2% KEV · Not listed
Vendors
Golang Netapp Redhat
Products
Go Cloud Insights Telegraf Agent Advanced Cluster Security and 9 more
CVE-2021-29923

golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Fedoraproject Golang Oracle and 1 more
Products
Fedora Go Timesten In-memory Database and 10 more
CVE-2021-28879

rust: integer overflow in the Zip implementation can lead to a buffer overflow

In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Fedoraproject Redhat Rust-lang
Products
Fedora Devtools Enterprise Linux and 1 more
CVE-2021-28878

rust: memory safety violation in Zip implementation when next_back() and next() are used together

In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Fedoraproject Redhat Rust-lang
Products
Fedora Devtools Enterprise Linux and 1 more
CVE-2021-28877

rust: memory safety violation in Zip implementation for nested iter::Zips

In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Redhat Rust-lang
Products
Devtools Enterprise Linux Rust
CVE-2021-28876

rust: panic safety issue in Zip implementation

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

CVSS 3.1 · 5.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Fedoraproject Redhat Rust-lang
Products
Fedora Devtools Enterprise Linux and 1 more
CVE-2021-28875

rust: heap-based buffer overflow in read_to_end() because it does not validate the return value from Read in an unsafe context

In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Redhat Rust-lang
Products
Devtools Enterprise Linux Rust
CVE-2021-28164

jetty: Ambiguous paths can access WEB-INF

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.

CVSS 3.1 · 5.3 Medium EPSS 82.4% KEV · Not listed
Vendors
Eclipse Netapp Oracle and 1 more
Products
Jetty Cloud Manager E-series Performance Analyzer and 20 more
CVE-2021-28163

jetty: Symlink directory exposes webapp directory contents

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory.

CVSS 3.1 · 2.7 Low EPSS 4.2% KEV · Not listed
Vendors
Apache Eclipse Fedoraproject and 3 more
Products
Ignite Solr Jetty and 27 more
CVE-2020-36323

rust: optimization for joining strings can cause uninitialized bytes to be exposed

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.

CVSS 3.1 · 8.2 High EPSS 2.0% KEV · Not listed
Vendors
Fedoraproject Redhat Rust-lang
Products
Fedora Devtools Enterprise Linux and 1 more
CVE-2020-36318

rust: use-after-free or double free in VecDeque::make_contiguous

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Redhat Rust-lang
Products
Devtools Enterprise Linux Rust
CVE-2020-36317

rust: memory safety violation in String::retain()

In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Redhat Rust-lang
Products
Devtools Enterprise Linux Rust
CVE-2020-28367

Arbitrary code execution via the go command with cgo in cmd/go

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Golang Redhat
Products
Go Devtools Enterprise Linux and 1 more
CVE-2020-28366

Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Fedoraproject Golang Netapp and 1 more
Products
Fedora Go Cloud Insights Telegraf Agent and 4 more