Skip to contentRedhat Enterprise Linux vulnerabilities
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 moreA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...CVE-2021-4034In KEVPublic exploitFix availableEPSS 94.9%7.8 High
- advanced intrusion detection environment project intrusion detection environment, canonical ubuntu linux, debian linux +4 more +6 moreAIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such...CVE-2021-45417Fix available7.8 High
- microsoft virglrenderer, redhat enterprise linux +1 moreA flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly...CVE-2022-0175Fix available5.5 Medium
- debian linux, flatpak, flatpak flatpak-builder +2 more +4 moreflatpak-builder can access files outside the build directory.CVE-2022-21682Fix available7.7 High
- debian linux, flatpak, fedoraproject fedora +1 more +3 morePermissions granted to applications can be hidden from the user at install timeCVE-2021-43860Fix available8.2 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreAn out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper...CVE-2021-4204Public exploitFix available7.1 High
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial...CVE-2021-3997Fix available5.5 Medium
- python, debian linux, netapp ontap select deploy administration utility +7 more +9 moreA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...CVE-2021-4189Fix available5.3 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets...CVE-2021-3623Fix available6.1 Medium
- vim, vim vim/vim, apple mac os x +6 more +8 moreOut-of-bounds Read in vim/vimCVE-2021-4166Fix available7.1 High
- qemu, redhat enterprise linux +1 moreA NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user...CVE-2021-4158Fix available6.0 Medium
- debian linux, fedoraproject fedora, libarchive +11 more +13 moreAn improper link resolution flaw can occur while extracting an archive leading to changing modes,...CVE-2021-31566Fix available7.8 High
- debian linux, fedoraproject fedora, libarchive +10 more +12 moreAn improper link resolution flaw while extracting an archive can lead to changing the access...CVE-2021-23177Fix available7.8 High
- ruby-lang cgi, ruby, debian linux +6 more +8 moreCookie Prefix Spoofing in CGI::Cookie.parseCVE-2021-41819Fix available7.5 High
- containers podman, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podmanCVE-2021-4024Fix available6.5 Medium
- gegl, gimp, fedoraproject fedora +1 more +3 moreGEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a...CVE-2021-45463Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through...CVE-2021-44733Public exploitFix available7.0 High
- gnu binutils, debian linux, fedoraproject fedora +2 more +4 morestab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a...CVE-2021-45078Fix available7.8 High
- apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 moreDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2CVE-2021-4104Public exploitFix availableEPSS 80.6%7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization...CVE-2021-4093Fix available8.8 High
- lapack project lapack, openblas project openblas, fedoraproject fedora +5 more +7 moreAn out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in...CVE-2021-4048Fix available9.1 Critical
- qemu, debian linux, redhat codeready linux builder +7 more +9 moreAn off-by-one error was found in the SCSI device emulation in QEMU. It could occur while...CVE-2021-3930Fix available6.5 Medium
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- pgbouncer, debian linux, fedoraproject fedora +1 more +3 moreWhen PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can...CVE-2021-3935Fix available8.1 High
- ruby-lang date, ruby, debian linux +6 more +8 moreRegular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41817Fix available7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux...CVE-2021-20320Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +1 more +3 moreIn ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z ...CVE-2021-3941Fix available6.5 Medium
- fedoraproject fedora, postgresql, redhat enterprise linux +3 more +5 moreWhen the server is configured to use trust authentication with a clientcert requirement or to use...CVE-2021-23214Fix available8.1 High
- red hat httpd, redhat enterprise linux +1 moreMissing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red...CVE-2021-20325Fix available9.8 Critical
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 moreA memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An...CVE-2021-3905Fix available7.5 High
- udisks project udisks, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image...CVE-2021-3802Fix available4.2 Medium
- debian linux, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreAn issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds...CVE-2021-43389Fix available5.5 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreHeap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that...CVE-2021-42781Fix available5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA use after return issue was found in Opensc before version 0.22.0 in insert_pin function that...CVE-2021-42780Fix available5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.CVE-2021-42779Fix available5.3 Medium
- red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 moreAnsible discloses sensitive information in traceback error messageCVE-2021-3620Fix available5.5 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreModerate: kernel security and bug fix updateCVE-2021-20321Fix available4.7 Medium
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with...CVE-2021-3669Fix available5.5 Medium
- redis, debian linux, fedoraproject fedora +5 more +7 moreVulnerability in Lua Debugger in RedisCVE-2021-32672Fix available5.3 Medium
- microsoft usbredir, debian linux, fedoraproject fedora +1 more +3 moreA use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the...CVE-2021-3700Fix available6.4 Medium
- cockpit-hq cockpit, redhat enterprise linux +1 moreCockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to...CVE-2021-3660Fix available4.3 Medium
- microsoft hivex, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted...CVE-2021-3622Fix available4.3 Medium
- debian linux, linux kernel, fedoraproject fedora +16 more +18 moreA use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls...CVE-2021-3752Fix available7.1 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3744Fix available5.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the libtpms code that may cause access beyond the boundary of internal...CVE-2021-3746Fix available6.5 Medium
- debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 moreA flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP...CVE-2021-3772Fix available6.5 Medium
- Show moreLoading…