DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux: Mehrere Schwachstellen
view advisory published 2021-05-04
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-28469US | high7.5 | — | ||
This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator. | ||||
| CVE-2021-28918US | critical9.1 | — | ||
Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on ma… | ||||
| CVE-2021-29418US | medium5.3 | — | ||
The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situations) allows attacke… | ||||
| CVE-2021-23358US | high7.2 | Exploit | ||
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a var… | ||||
| CVE-2021-28092US | high7.5 | — | ||
The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-0350 vom 2022-02-02external
- Red Hat Security Advisory: RHSA-2021:1499 vom 2021-05-04external
- Red Hat Security Advisory RHSA-2021:2461 vom 2021-06-16external
- Red Hat Security Advisory RHSA-2021:2865 vom 2021-07-22external
- Red Hat Security Advisory RHSA-2021:3016 vom 2021-08-06external
- Red Hat Security Advisory RHSA-2021:3280 vom 2021-08-26external
- Red Hat Security Advisory RHSA-2021:3281 vom 2021-08-26external
- Red Hat Security Advisory RHSA-2021:3759 vom 2021-10-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan