Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 185

Export CSV
CVE-2021-3975

libvirt: segmentation fault during VM shutdown can lead to vdsm hang

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.

CVSS 3.1 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 12 more
CVE-2021-3696

grub2: Crafted PNG image may lead to out-of-bound write during huffman table handling

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu Netapp Redhat
Products
Grub2 Ontap Select Deploy Administration Utility Codeready Linux Builder and 12 more
CVE-2021-3695

grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform some triage over the heap layout to achieve signifcant results, also the values written into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 versions prior grub-2.12.

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnu Netapp and 1 more
Products
Fedora Grub2 Ontap Select Deploy Administration Utility and 13 more
CVE-2021-3671

samba: Null pointer dereference on missing sname in TGS-REQ

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Netapp Samba
Products
Debian Linux Management Services For Element Software Management Services For Netapp Hci and 2 more
CVE-2021-3631

libvirt: Insecure sVirt label generation

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netapp Redhat
Products
Ontap Select Deploy Administration Utility Advanced Virtualization Enterprise Linux and 2 more
CVE-2021-3559

libvirt: nodedev-list command may cause libvirt to crash on hosts with GRID driver installed

A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that supports mediated devices (e.g., GRID driver). This flaw could be used by an unprivileged client with a read-only connection to crash the libvirt daemon by executing the 'nodedev-list' virsh command. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Netapp Redhat
Products
Ontap Select Deploy Administration Utility Libvirt
CVE-2021-3530

binutils: stack memory exhaustion in demangle_path() in rust-demangle.c

A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Gnu Netapp
Products
Binutils Ontap Select Deploy Administration Utility
CVE-2021-25217

A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient

In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no longer supported by ISC. From inspection it is clear that the defect is also present in releases from those series, but they have not been officially tested for the vulnerability), The outcome of encountering the defect while reading a lease that will trigger it varies, according to: the component being affected (i.e., dhclient or dhcpd) whether the package was built as a 32-bit or 64-bit binary whether the compiler flag -fstack-protection-strong was used when compiling In dhclient, ISC has not successfully reproduced the error on a 64-bit system. However, on a 32-bit system it is possible to cause dhclient to crash when reading an improper lease, which could cause network connectivity problems for an affected system due to the absence of a running DHCP client process. In dhcpd, when run in DHCPv4 or DHCPv6 mode: if the dhcpd server binary was built for a 32-bit architecture AND the -fstack-protection-strong flag was specified to the compiler, dhcpd may exit while parsing a lease file containing an objectionable lease, resulting in lack of service to clients. Additionally, the offending lease and the lease immediately following it in the lease database may be improperly deleted. if the dhcpd server binary was built for a 64-bit architecture OR if the -fstack-protection-strong compiler flag was NOT specified, the crash will not occur, but it is possible for the offending lease and the lease which immediately followed it to be improperly deleted.

CVSS 3.1 · 7.4 High EPSS 6.1% KEV · Not listed
Vendors
Debian Fedoraproject Isc and 3 more
Products
Debian Linux Fedora Dhcp and 30 more
CVE-2021-23017

nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVSS 3.1 · 7.7 High EPSS 53.5% KEV · Not listed
Vendors
F5 Fedoraproject Netapp and 3 more
Products
Nginx Fedora Ontap Select Deploy Administration Utility and 16 more
CVE-2021-20284

binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Gnu Netapp Redhat
Products
Binutils Cloud Backup Ontap Select Deploy Administration Utility and 1 more
CVE-2021-20233

grub2: Heap out-of-bounds write due to miscalculation of space required for quoting

A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to corrupt memory by one byte for each quote in the input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnu Netapp and 1 more
Products
Fedora Grub2 Ontap Select Deploy Administration Utility and 9 more
CVE-2021-20225

grub2: Heap out-of-bounds write in short form option parser

A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 6.7 Medium EPSS 1.0% KEV · Not listed
Vendors
Fedoraproject Gnu Netapp and 1 more
Products
Fedora Grub2 Ontap Select Deploy Administration Utility and 9 more
CVE-2020-36331

libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVSS 3.1 · 9.1 Critical EPSS 2.3% KEV · Not listed
Vendors
Apple Debian Netapp and 2 more
Products
Ipados Iphone Os Debian Linux and 3 more
CVE-2020-36330

libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVSS 3.1 · 9.1 Critical EPSS 2.2% KEV · Not listed
Vendors
Apple Debian Netapp and 2 more
Products
Ipados Iphone Os Debian Linux and 3 more
CVE-2020-36329

libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Apple Debian Netapp and 2 more
Products
Ipados Iphone Os Debian Linux and 5 more
CVE-2020-36328

libwebp: heap-based buffer overflow in WebPDecode*Into functions

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Apple Debian Netapp and 2 more
Products
Ipados Iphone Os Debian Linux and 5 more