DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux: Mehrere Schwachstellen
view advisory published 2021-06-29
Ein entfernter, anonymer, authentifizierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen und einen Denial of Service Zustand herzustellen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-28211US | medium6.7 | — | ||
A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. | ||||
| CVE-2021-3520US | critical9.8 | — | ||
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a neg… | ||||
| CVE-2021-3514US | medium6.5 | — | ||
When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash. | ||||
| CVE-2020-14343US | critical9.8 | Exploit | ||
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-2595 vom 2021-07-03external
- Red Hat Customer Portal - Security Advisory vom 2021-06-29external
- Red Hat Customer Portal - Security Advisory vom 2021-06-29external
- Red Hat Customer Portal - Security Advisory vom 2021-06-29external
- Red Hat Customer Portal - Security Advisory vom 2021-06-29external
- Red Hat Security Advisory RHSA-2021:2796 vom 2021-07-21external
- Red Hat Security Advisory RHSA-2021:3016 vom 2021-08-06external
- Red Hat Security Advisory RHSA-2021:3024 vom 2021-08-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan