Skip to contentRedhat Enterprise Linux vulnerabilities
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreA crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <...CVE-2021-39251Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement updateCVE-2021-33285Fix available7.8 High
- linux kernel, netapp active iq unified manager, bootstrap os +9 more +11 moreModerate: kernel-rt security and bug fix updateCVE-2021-3753Fix available4.7 Medium
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...CVE-2021-3748Fix available7.5 High
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- squashfs-tools project squashfs-tools, debian linux, fedoraproject fedora +1 more +3 moresquashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry...CVE-2021-40153Fix available8.1 High
- libssh, debian linux, fedoraproject fedora +4 more +6 moreA flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two...CVE-2021-3634Fix available6.5 Medium
- redhat libvirt, debian linux, netapp ontap select deploy administration utility +1 more +3 moreAn improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It...CVE-2021-3667Fix available6.5 Medium
- kernel kvm, linux kernel, fedoraproject fedora +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3656Public exploitFix available8.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs...CVE-2021-3653Fix available8.8 High
- fedoraproject sssd, fedora, redhat enterprise linux +5 more +7 moreA flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via...CVE-2021-3621Fix available8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A...CVE-2021-3635Fix available4.4 Medium
- postgresql, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory...CVE-2021-3677Fix available6.5 Medium
- exim libspf2, fedoraproject fedora, redhat enterprise linux +2 moreStack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can...CVE-2021-20314Fix available9.8 Critical
- linux kernel, fedoraproject fedora, redhat codeready linux builder +12 more +14 moreA NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking...CVE-2021-3659Fix available5.5 Medium
- c-ares, fedoraproject fedora, nodejs node.js +14 more +16 moreA flaw was found in c-ares library, where a missing input validation check of host names returned...CVE-2021-3672Fix available5.6 Medium
- debian linux, linux kernel, netapp element software +4 more +6 moreIn drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can...CVE-2021-38160Fix availableDisputed7.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14...CVE-2021-3679Public exploitFix available5.5 Medium
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2....CVE-2021-3682Fix available8.5 High
- redhat libvirt, netapp ontap select deploy administration utility, redhat enterprise linux +1 more +3 moreA flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels...CVE-2021-3631Fix available6.3 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreA vulnerability was found in the Linux kernel in versions before v5.14-rc1. Missing size...CVE-2021-3655Fix available3.3 Low
- qemu, redhat enterprise linux +1 moreA stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A...CVE-2021-3611Fix available6.5 Medium
- buildah project buildah, redhat enterprise linux, enterprise linux for ibm z systems +1 more +3 moreBuildah processes using chroot isolation may leak environment values to intermediate processesCVE-2021-3602Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreAn out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in...CVE-2021-3612Fix available7.8 High
- linuxptp project linuxptp, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a...CVE-2021-3571Fix available7.1 High
- debian linux, linuxptp project linuxptp, fedoraproject fedora +4 more +6 moreA flaw was found in the ptp4l program of the linuxptp package. A missing length check when...CVE-2021-3570Fix available8.8 High
- uclouvain openjpeg, fedoraproject fedora, redhat enterprise linux +2 moreA heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when...CVE-2021-3575Fix available7.8 High
- linux, linux kernel, canonical ubuntu linux +2 more +4 moreIt was discovered that the eBPF implementation in the Linux kernel did not properly track bounds...CVE-2021-3600Fix available7.8 High
- linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker...CVE-2021-3609Fix available7.0 High
- academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 moreThere's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker...CVE-2021-3605Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 moreThere's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An...CVE-2021-3598Fix available5.5 Medium
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3595Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3594Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3593Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3592Fix available3.8 Low
- [unknown] nettle, debian linux, netapp ontap select deploy administration utility +4 more +6 moreA flaw was found in the way nettle's RSA decryption functions handled specially crafted...CVE-2021-3580Fix available7.5 High
- htmldoc project htmldoc, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdf_prepare_page(),in ps-pdf...CVE-2021-26252Fix available7.8 High
- bluez, debian linux, redhat enterprise linux +2 moreImproper access control in BlueZ may allow an authenticated user to potentially enable...CVE-2021-0129Fix available5.7 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found...CVE-2021-3573Fix available6.4 Medium
- tpm2-software tpm2-tools, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a...CVE-2021-3565Fix available5.9 Medium
- libtpms project libtpms, redhat enterprise linux +1 moreA stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while...CVE-2021-3569Fix available5.5 Medium
- dogtagpki, fedoraproject fedora, oracle linux +9 more +11 moreA flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores...CVE-2021-3551Fix available7.8 High
- linux kernel, redhat enterprise linux +1 moreA flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to...CVE-2020-10742Fix available6.0 Medium
- linux kernel, nitro enclaves project enclaves, fedoraproject fedora +1 more +3 moreA flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that...CVE-2021-3543Fix available6.7 Medium
- microsoft zeromq, fedoraproject fedora, redhat ceph storage +1 more +3 moreA flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious...CVE-2021-20236Fix available9.8 Critical
- upx, fedoraproject fedora, redhat enterprise linux +2 moreAn assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow...CVE-2021-30501Fix available5.5 Medium
- upx, fedoraproject fedora, redhat enterprise linux +2 moreNull pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version...CVE-2021-30500Fix available7.8 High
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary...CVE-2021-30471Fix available5.5 Medium
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(),...CVE-2021-30470Fix available5.5 Medium
- Show moreLoading…