Vulnerability & Exploit Database

Red Hat OpenShift: CVE-2021-3560: local privilege escalation using polkit_system_bus_name_get_creds_sync()

Red Hat: CVE-2020-23903: CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file (Multiple Advisories)

Red Hat: CVE-2021-42771: CVE-2021-20095 CVE-2021-42771 python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (Multiple Advisories)

CentOS Linux: CVE-2021-20325: Important: httpd:2.4 security update (CESA-2021:4537)

Red Hat: CVE-2021-3659: CVE-2021-3659 kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (Multiple Advisories)

Red Hat: CVE-2021-20095: CVE-2021-20095 CVE-2021-42771 python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (Multiple Advisories)

Red Hat: CVE-2021-20269: CVE-2021-20269 kexec-tools: incorrect permissions on kdump dmesg file (Multiple Advisories)

Red Hat: CVE-2021-20325: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5 (Multiple Advisories)

Red Hat: CVE-2021-3600: CVE-2021-3600 kernel: eBPF 32-bit source register truncation on div/mod (Multiple Advisories)

Red Hat: CVE-2021-3481: CVE-2021-3481 qt: Out of bounds read in function QRadialFetchSimd from crafted svg file (Multiple Advisories)

Red Hat: CVE-2021-3800: Possible privilege escalation thourgh pkexec and aliases (Multiple Advisories)

Red Hat: CVE-2021-3732: CVE-2021-3732 kernel: overlayfs: Mounting overlayfs inside an unprivileged user namespace can reveal files (Multiple Advisories)

Red Hat: CVE-2021-3737: HTTP client possible infinite loop on a 100 Continue response (Multiple Advisories)

Red Hat: CVE-2021-3575: CVE-2021-3575 openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (Multiple Advisories)

Red Hat: CVE-2021-3572: CVE-2021-3572 python-pip: Incorrect handling of unicode separators in git references (Multiple Advisories)

Red Hat: CVE-2021-3602: Host environment variables leaked in build container when using chroot isolation (Multiple Advisories)

Red Hat: CVE-2021-43519: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file (Multiple Advisories)

Red Hat: CVE-2021-41772: Reader.Open panics on empty string (Multiple Advisories)

Red Hat: CVE-2021-41771: invalid dynamic symbol table command can cause panic (Multiple Advisories)

Red Hat OpenShift: CVE-2021-41772: golang: archive/zip: Reader.Open panics on empty string