Vulnerabilities > Fedoraproject
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-09-08 | CVE-2021-21897 | Integer Underflow (Wrap or Wraparound) vulnerability in multiple products A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. | 8.8 |
| 2021-09-08 | CVE-2021-21996 | An issue was discovered in SaltStack Salt before 3003.3. | 7.5 |
| 2021-09-08 | CVE-2021-22004 | Race Condition vulnerability in multiple products An issue was discovered in SaltStack Salt before 3003.3. | 6.4 |
| 2021-09-08 | CVE-2021-28701 | Race Condition vulnerability in multiple products Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. | 7.8 |
| 2021-09-07 | CVE-2020-19752 | NULL Pointer Dereference vulnerability in multiple products The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference. | 7.5 |
| 2021-09-07 | CVE-2021-33287 | Out-of-bounds Write vulnerability in multiple products In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application. | 7.8 |
| 2021-09-07 | CVE-2021-35266 | Out-of-bounds Write vulnerability in multiple products In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffer overflow can occur resulting in memory disclosure, denial of service and even code execution. | 7.8 |
| 2021-09-07 | CVE-2021-35267 | Out-of-bounds Write vulnerability in multiple products NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root. | 7.8 |
| 2021-09-07 | CVE-2021-39251 | NULL Pointer Dereference vulnerability in multiple products A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22. | 7.8 |
| 2021-09-07 | CVE-2021-39252 | Out-of-bounds Read vulnerability in multiple products A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22. | 7.8 |