CVE-2021-4095
- EPSS 0.11%
- Veröffentlicht 10.03.2022 17:44:53
- Zuletzt bearbeitet 21.11.2024 06:36:53
A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of servi...
CVE-2021-4023
- EPSS 0.09%
- Veröffentlicht 10.03.2022 17:44:50
- Zuletzt bearbeitet 21.11.2024 06:36:44
A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This ...
CVE-2021-44269
- EPSS 0.12%
- Veröffentlicht 10.03.2022 17:44:14
- Zuletzt bearbeitet 21.11.2024 06:30:41
An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.
CVE-2021-3981
- EPSS 0.02%
- Veröffentlicht 10.03.2022 17:43:14
- Zuletzt bearbeitet 21.11.2024 06:23:18
A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can even...
CVE-2021-3739
- EPSS 0.03%
- Veröffentlicht 10.03.2022 17:43:01
- Zuletzt bearbeitet 21.11.2024 06:22:18
A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal info...
CVE-2021-3733
- EPSS 0.72%
- Veröffentlicht 10.03.2022 17:42:59
- Zuletzt bearbeitet 03.11.2025 22:15:50
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication r...
CVE-2021-34342
- EPSS 0.28%
- Veröffentlicht 10.03.2022 17:42:38
- Zuletzt bearbeitet 21.11.2024 06:10:12
Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak.
CVE-2021-34339
- EPSS 0.24%
- Veröffentlicht 10.03.2022 17:42:37
- Zuletzt bearbeitet 21.11.2024 06:10:11
Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.
CVE-2021-34340
- EPSS 0.24%
- Veröffentlicht 10.03.2022 17:42:37
- Zuletzt bearbeitet 21.11.2024 06:10:12
Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.
CVE-2021-34341
- EPSS 0.24%
- Veröffentlicht 10.03.2022 17:42:37
- Zuletzt bearbeitet 21.11.2024 06:10:12
Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a direct segmentation fault and leads to denial of service.