CVE-2021-33910 vulnerabilities and exploits

(subscribe to this query)

4.9

CVSSv2

basic/unit-name.c in systemd before 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

Systemd Project Systemd Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 10.0 Netapp Solidfire -Netapp Hci Management Node -

1 Github repository

4.9

CVSSv2

An issue exists in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafte...

7.2

CVSSv2

fs/seq_file.c in the Linux kernel 3.16 up to and including 5.13.x prior to 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.

Linux Linux Kernel Fedoraproject Fedora 34 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Solidfire -Netapp Hci Management Node -Oracle Communications Session Border Controller 8.3 Oracle Communications Session Border Controller 8.4 Oracle Communications Session Border Controller 9.0 Oracle Communications Session Border Controller 8.2 Sonicwall Sma1000 Firmware

9 Github repositories

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook