Vulnerability & Exploit Database

Red Hat: CVE-2021-3802: CVE-2021-3802 udisks2: insecure defaults in user-accessible mount helpers allow for a DoS (Multiple Advisories)

Red Hat: CVE-2021-44225: CVE-2021-44225 keepalived: dbus access control bypass (Multiple Advisories)

Oracle Linux: (CVE-2021-20325) ELSA-2021-4537: httpd:2.4 security update

Red Hat: CVE-2021-27023: Important: Satellite Tools 6.10.5 Async Bug Fix Update (Multiple Advisories)

Red Hat: CVE-2021-27025: Important: Satellite Tools 6.10.5 Async Bug Fix Update (Multiple Advisories)

Red Hat: CVE-2021-41190: OCI manifest and index parsing confusion (Multiple Advisories)

Red Hat: CVE-2021-33098: Improper input validation in the Intel(R) Ethernet ixgbe driver may allow an authenticated user to potentially enable DoS via local access (Multiple Advisories)

Red Hat: CVE-2021-43975: kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c (Multiple Advisories)

Red Hat: CVE-2021-43976: CVE-2021-43976 kernel: mwifiex_usb_recv() in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker to cause DoS via crafted USB device (Multiple Advisories)

Red Hat OpenShift: CVE-2021-41190: opencontainers: OCI manifest and index parsing confusion

Red Hat: CVE-2021-3620: Important: RHV Engine and Host Common Packages security update [ovirt-4.4.9] (RHSA-2021:4703)

Red Hat: CVE-2021-22959: HTTP Request Smuggling due to spaces in headers (Multiple Advisories)

Red Hat: CVE-2021-43618: Integer overflow and resultant buffer overflow via crafted input (Multiple Advisories)

Red Hat: CVE-2021-43267: CVE-2021-43267 kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (Multiple Advisories)

Red Hat: CVE-2021-3918: Prototype pollution vulnerability (Multiple Advisories)

Red Hat: CVE-2021-43616: CVE-2021-43616 npm: npm ci succeeds when package-lock.json doesn't match package.json (Multiple Advisories)

Red Hat: CVE-2021-41229: CVE-2021-41229 bluez: memory leak in the SDP protocol (Multiple Advisories)

Red Hat OpenShift: CVE-2021-3917: coreos-installer: restrict access permissions on /boot/ignition{,/config.ign}

Red Hat: CVE-2021-41160: improper region checks in all clients allow out of bound write to memory (Multiple Advisories)

Red Hat: CVE-2021-41159: improper client input validation for gateway connections allows to overwrite memory (Multiple Advisories)