CVE-2021-3326

glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Debian Fujitsu Gnu and 3 more

Products

Debian Linux M10-1 M10-1 Firmware and 15 more

CVE-2021-3177

python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

CVSS 3.1 · 9.8 Critical EPSS 24.0% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 3 more

Products

Debian Linux Fedora Active Iq Unified Manager and 9 more

CVE-2020-35527

sqlite: Out of bounds access during table rename

In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed

Vendors

Netapp Redhat Sqlite

Products

Ontap Select Deploy Administration Utility Enterprise Linux Sqlite

CVE-2020-27618

glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Gnu Netapp and 2 more

Products

Debian Linux Glibc 500f and 22 more

CVE-2020-14145

openssh: Observable discrepancy leading to an information leak in the algorithm negotiation

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

CVSS 3.1 · 5.9 Medium EPSS 2.9% KEV · Not listed

Vendors

Netapp Openbsd Redhat

Products

Active Iq Unified Manager Aff A700s Aff A700s Firmware and 8 more

CVE-2020-13871

sqlite: use-after-free in resetAccumulator in select.c

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 3 more

Products

Debian Linux Fedora Cloud Backup and 9 more

CVE-2020-11656

sqlite: use-after-free in the ALTER TABLE implementation

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

CVSS 3.1 · 9.8 Critical EPSS 8.7% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Ontap Select Deploy Administration Utility Communications Messaging Server Communications Network Charging And Control and 9 more

CVE-2020-11655

sqlite: malformed window-function query leads to DoS

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Netapp and 4 more

Products

Ubuntu Linux Debian Linux Ontap Select Deploy Administration Utility and 15 more

CVE-2019-25013

glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.

CVSS 3.1 · 5.9 Medium EPSS 3.6% KEV · Not listed

Vendors

Broadcom Debian Fedoraproject and 3 more

Products

Fabric Operating System Debian Linux Fedora and 9 more

CVE-2019-20388

libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 4 more

Products

Debian Linux Fedora Cloud Backup and 31 more

CVE-2019-19956

libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

CVSS 3.1 · 7.5 High EPSS 5.6% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 5 more

Products

Ubuntu Linux Debian Linux Fedora and 12 more

CVE-2019-19646

sqlite: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVSS 3.1 · 9.8 Critical EPSS 7.4% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 3 more

CVE-2019-19645

sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 3 more

CVE-2019-19603

sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

CVSS 3.1 · 7.5 High EPSS 11.0% KEV · Not listed

Vendors

Apache Netapp Oracle and 3 more

Products

Guacamole Cloud Backup Ontap Select Deploy Administration Utility and 4 more

CVE-2019-19317

sqlite: omits bits from the colUsed bitmask in the case of a generated column

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed

Vendors

Netapp Oracle Siemens and 1 more

Products

Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 2 more

CVE-2019-9169

glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed

Vendors

Canonical Gnu Mcafee and 2 more

Products

Ubuntu Linux Glibc Web Gateway and 4 more

CVE-2019-6110

openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.

CVSS 3.1 · 6.8 Medium EPSS 24.9% KEV · Not listed

Vendors

Netapp Openbsd Siemens and 1 more

Products

Element Software Ontap Select Deploy Storage Automation Store and 6 more

CVE-2019-6109

openssh: Missing character encoding in progress display allows for spoofing of scp client output

An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.

CVSS 3.1 · 6.8 Medium EPSS 3.8% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 6 more

Products

Ubuntu Linux Debian Linux Fedora and 25 more

CVE-2019-3863

libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.

CVSS 3.0 · 7.5 High EPSS 3.4% KEV · Not listed

Vendors

Debian Libssh2 Netapp and 2 more

Products

Debian Linux Libssh2 Ontap Select Deploy Administration Utility and 12 more

CVE-2019-3862

libssh2: Out-of-bounds memory comparison with specially crafted message channel request

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

CVSS 3.0 · 7.3 High EPSS 7.9% KEV · Not listed

Vendors

Debian Fedoraproject Libssh2 and 3 more

Products

Debian Linux Fedora Libssh2 and 4 more