Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

canonical ubuntu linux 21.04 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2021-32553
It exists that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.
Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 20.10Canonical Ubuntu Linux 21.04Canonical Ubuntu Linux 21.10Oracle Openjdk 17
7.8
CVSSv3
CVE-2021-3489
The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an malicious user to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed ...
Linux Linux KernelLinux Linux Kernel 5.13Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 20.10Canonical Ubuntu Linux 21.04
7.8
CVSSv3
CVE-2021-3490
The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4...
Linux Linux KernelLinux Linux Kernel 5.13Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 20.10Canonical Ubuntu Linux 21.04
7.5
CVSSv3
CVE-2022-20698
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote malicious user to cause a denial of service condition on an affected device. The vulnerability is due ...
Clamav ClamavDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 20.10Canonical Ubuntu Linux 21.04
7.5
CVSSv3
CVE-2020-15078
OpenVPN 2.5.1 and previous versions versions allows a remote malicious users to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
Openvpn OpenvpnFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 20.10Canonical Ubuntu Linux 21.04Debian Debian Linux 9.0
7.3
CVSSv3
CVE-2021-44420
In Django 2.2 prior to 2.2.25, 3.1 prior to 3.1.14, and 3.2 prior to 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.
Djangoproject DjangoRedhat Satellite 6.0Debian Debian Linux 10.0Debian Debian Linux 11.0Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 21.04Canonical Ubuntu Linux 21.10Fedoraproject Fedora 35
8.8
CVSSv3
CVE-2020-25722
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
Samba SambaDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 21.04Canonical Ubuntu Linux 21.10
7.8
CVSSv3
CVE-2021-45417
AIDE prior to 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
Advanced Intrusion Detection Environment Project Advanced Intrusion Detection EnvironmentRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Virtualization Host 4.0Redhat Enterprise Linux 8.0Redhat Ovirt-node 4.4.10Fedoraproject Fedora 35Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 21.04Canonical Ubuntu Linux 21.10Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
7.5
CVSSv3
CVE-2021-3737
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to syst...
Python PythonRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Codeready Linux Builder For Ibm Z Systems 8.0Redhat Codeready Linux Builder For Power Little Endian 8.0Redhat Codeready Linux Builder 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 21.04Netapp Ontap Select Deploy Administration Utility -Netapp Hci -Netapp Management Services For Element Software -Netapp Netapp Xcp Smb -Netapp Xcp Nfs -Oracle Communications Cloud Native Core Binding Support Function 22.1.3
5.9
CVSSv3
CVE-2016-2124
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
Samba SambaDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Resilient Storage 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Gluster Storage 3.0Redhat Virtualization Host 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Openstack 13Redhat Openstack 16.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook