Branch sisyphus update bulletin.

Package virtualbox updated to version 6.1.20-alt1 for branch sisyphus in task 270442.

Published: 2021-04-21

BDU:2021-02309

Уязвимость компонента Core программного средства виртуализации Oracle VM VirtualBox, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-21

BDU:2021-02310

Уязвимость компонента Core программного средства виртуализации Oracle VM VirtualBox, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-21

BDU:2021-02311

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-21

BDU:2021-02312

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-21

BDU:2021-02313

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-21

BDU:2021-02314

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-21

BDU:2021-02315

Уязвимость компонента Core программного средства виртуализации Oracle VM VirtualBox, позволяющая нарушителю получить доступ на изменение, добавление или удаление данных

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-21

BDU:2021-02316

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-21

BDU:2021-02317

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-21

BDU:2021-02318

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-21

BDU:2021-02319

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-21

BDU:2021-02320

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-21

BDU:2021-02321

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-21

BDU:2021-02341

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02397

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-20

BDU:2021-02398

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-20

BDU:2021-02399

Уязвимость компонента Core программного средства виртуализации Oracle VM VirtualBox, позволяющая нарушителю выполнить произвольный код или получить полный контроль над приложением

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2145

Published: 2021-04-20

BDU:2021-02400

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2309

Published: 2021-04-20

BDU:2021-02401

Уязвимость компонента Core программного средства виртуализации Oracle VM VirtualBox, позволяющая нарушителю получить несанкционированный доступ на изменение, добавление или удаление данных

Severity: HIGH (8.4) Vector: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References:

CVE-2021-2264

Published: 2021-01-05

BDU:2021-02402

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2021-04-20

BDU:2021-02410

Severity: HIGH (8.2) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2250

Published: 2021-04-20

BDU:2021-02411

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-20

BDU:2021-02412

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-20

BDU:2021-02428

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-20

BDU:2021-02429

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-20

BDU:2021-02430

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-20

BDU:2021-02431

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-20

BDU:2021-02432

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02437

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-20

BDU:2021-02438

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-20

BDU:2021-02439

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-20

BDU:2021-02440

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-20

BDU:2021-02441

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-20

BDU:2021-02450

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2310

Published: 2021-04-26

BDU:2021-02979

Уязвимость компонента Core программного средства виртуализации Oracle VM VirtualBox, позволяющая нарушителю получить полный контроль над приложением

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2321

CVE-2021-2310

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2312

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity: LOW (2.1)

References:

Published: 2021-04-29
Modified: 2024-11-21

CVE-2021-2321

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Severity: LOW (2.1)

References:

Package kernel-modules-virtualbox-addition-std-def updated to version 6.1.20-alt1.330269.1 for branch sisyphus in task 270442.

Published: 2021-04-21

BDU:2021-02309

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-21

BDU:2021-02310

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-21

BDU:2021-02311

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-21

BDU:2021-02312

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-21

BDU:2021-02313

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-21

BDU:2021-02314

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-21

BDU:2021-02315

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-21

BDU:2021-02316

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-21

BDU:2021-02317

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-21

BDU:2021-02318

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-21

BDU:2021-02319

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-21

BDU:2021-02320

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-21

BDU:2021-02321

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-21

BDU:2021-02341

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02397

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-20

BDU:2021-02398

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-20

BDU:2021-02399

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2145

Published: 2021-04-20

BDU:2021-02400

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2309

Published: 2021-04-20

BDU:2021-02401

Severity: HIGH (8.4) Vector: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References:

CVE-2021-2264

Published: 2021-01-05

BDU:2021-02402

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2021-04-20

BDU:2021-02410

Severity: HIGH (8.2) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2250

Published: 2021-04-20

BDU:2021-02411

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-20

BDU:2021-02412

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-20

BDU:2021-02428

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-20

BDU:2021-02429

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-20

BDU:2021-02430

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-20

BDU:2021-02431

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-20

BDU:2021-02432

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02437

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-20

BDU:2021-02438

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-20

BDU:2021-02439

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-20

BDU:2021-02440

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-20

BDU:2021-02441

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-20

BDU:2021-02450

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2310

Published: 2021-04-26

BDU:2021-02979

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2321

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2145

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2310

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2312

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity: LOW (2.1)

References:

Published: 2021-04-29
Modified: 2024-11-21

CVE-2021-2321

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Severity: LOW (2.1)

References:

Package kernel-modules-virtualbox-addition-un-def updated to version 6.1.20-alt1.330511.1 for branch sisyphus in task 270442.

Published: 2021-04-21

BDU:2021-02309

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-21

BDU:2021-02310

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-21

BDU:2021-02311

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-21

BDU:2021-02312

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-21

BDU:2021-02313

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-21

BDU:2021-02314

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-21

BDU:2021-02315

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-21

BDU:2021-02316

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-21

BDU:2021-02317

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-21

BDU:2021-02318

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-21

BDU:2021-02319

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-21

BDU:2021-02320

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-21

BDU:2021-02321

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-21

BDU:2021-02341

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02397

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-20

BDU:2021-02398

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-20

BDU:2021-02399

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2145

Published: 2021-04-20

BDU:2021-02400

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2309

Published: 2021-04-20

BDU:2021-02401

Severity: HIGH (8.4) Vector: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References:

CVE-2021-2264

Published: 2021-01-05

BDU:2021-02402

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2021-04-20

BDU:2021-02410

Severity: HIGH (8.2) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2250

Published: 2021-04-20

BDU:2021-02411

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-20

BDU:2021-02412

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-20

BDU:2021-02428

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-20

BDU:2021-02429

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-20

BDU:2021-02430

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-20

BDU:2021-02431

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-20

BDU:2021-02432

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02437

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-20

BDU:2021-02438

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-20

BDU:2021-02439

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-20

BDU:2021-02440

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-20

BDU:2021-02441

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-20

BDU:2021-02450

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2310

Published: 2021-04-26

BDU:2021-02979

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2321

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2145

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2310

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2312

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity: LOW (2.1)

References:

Published: 2021-04-29
Modified: 2024-11-21

CVE-2021-2321

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Severity: LOW (2.1)

References:

Package kernel-modules-virtualbox-un-def updated to version 6.1.20-alt1.330511.1 for branch sisyphus in task 270442.

Published: 2021-04-21

BDU:2021-02309

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-21

BDU:2021-02310

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-21

BDU:2021-02311

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-21

BDU:2021-02312

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-21

BDU:2021-02313

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-21

BDU:2021-02314

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-21

BDU:2021-02315

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-21

BDU:2021-02316

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-21

BDU:2021-02317

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-21

BDU:2021-02318

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-21

BDU:2021-02319

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-21

BDU:2021-02320

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-21

BDU:2021-02321

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-21

BDU:2021-02341

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02397

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-20

BDU:2021-02398

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-20

BDU:2021-02399

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2145

Published: 2021-04-20

BDU:2021-02400

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2309

Published: 2021-04-20

BDU:2021-02401

Severity: HIGH (8.4) Vector: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References:

CVE-2021-2264

Published: 2021-01-05

BDU:2021-02402

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2021-04-20

BDU:2021-02410

Severity: HIGH (8.2) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2250

Published: 2021-04-20

BDU:2021-02411

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-20

BDU:2021-02412

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-20

BDU:2021-02428

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-20

BDU:2021-02429

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-20

BDU:2021-02430

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-20

BDU:2021-02431

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-20

BDU:2021-02432

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02437

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-20

BDU:2021-02438

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-20

BDU:2021-02439

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-20

BDU:2021-02440

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-20

BDU:2021-02441

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-20

BDU:2021-02450

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2310

Published: 2021-04-26

BDU:2021-02979

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2321

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2145

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2310

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2312

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity: LOW (2.1)

References:

Published: 2021-04-29
Modified: 2024-11-21

CVE-2021-2321

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Severity: LOW (2.1)

References:

Package kernel-modules-virtualbox-std-def updated to version 6.1.20-alt1.330269.1 for branch sisyphus in task 270442.

Published: 2021-04-21

BDU:2021-02309

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-21

BDU:2021-02310

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-21

BDU:2021-02311

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-21

BDU:2021-02312

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-21

BDU:2021-02313

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-21

BDU:2021-02314

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-21

BDU:2021-02315

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-21

BDU:2021-02316

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-21

BDU:2021-02317

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-21

BDU:2021-02318

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-21

BDU:2021-02319

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-21

BDU:2021-02320

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-21

BDU:2021-02321

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-21

BDU:2021-02341

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02397

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2282

Published: 2021-04-20

BDU:2021-02398

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2280

Published: 2021-04-20

BDU:2021-02399

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2145

Published: 2021-04-20

BDU:2021-02400

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2309

Published: 2021-04-20

BDU:2021-02401

Severity: HIGH (8.4) Vector: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References:

CVE-2021-2264

Published: 2021-01-05

BDU:2021-02402

Severity: HIGH (8.1) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2021-04-20

BDU:2021-02410

Severity: HIGH (8.2) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2250

Published: 2021-04-20

BDU:2021-02411

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2283

Published: 2021-04-20

BDU:2021-02412

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2266

Published: 2021-04-20

BDU:2021-02428

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-2291

Published: 2021-04-20

BDU:2021-02429

Severity: MEDIUM (4.4) Vector: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-2312

Published: 2021-04-20

BDU:2021-02430

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2281

Published: 2021-04-20

BDU:2021-02431

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2284

Published: 2021-04-20

BDU:2021-02432

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

References:

CVE-2021-2286

Published: 2021-04-20

BDU:2021-02437

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2285

Published: 2021-04-20

BDU:2021-02438

Severity: HIGH (7.1) Vector: AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2287

Published: 2021-04-20

BDU:2021-02439

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2306

Published: 2021-04-20

BDU:2021-02440

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2296

Published: 2021-04-20

BDU:2021-02441

Severity: MEDIUM (5.3) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2297

Published: 2021-04-20

BDU:2021-02450

Severity: HIGH (7.5) Vector: AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

References:

CVE-2021-2310

Published: 2021-04-26

BDU:2021-02979

Severity: MEDIUM (6.0) Vector: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

References:

CVE-2021-2321

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2145

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2310

Severity: MEDIUM (4.4)

References:

Published: 2021-04-23
Modified: 2024-11-21

CVE-2021-2312

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Severity: LOW (2.1)

References:

Published: 2021-04-29
Modified: 2024-11-21

CVE-2021-2321

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Severity: LOW (2.1)

References:

Package altmediawriter updated to version 0.6.3-alt1 for branch sisyphus in task 270472.

Не работает запись образа на usb-флешку после загрузки

Package kernel-image-mp updated to version 5.11.16-alt1 for branch sisyphus in task 270482.

Published: 2021-04-08

BDU:2021-02182

Уязвимость компонента BPF JIT (arch/x86/net/bpf_jit_comp.c и arch/x86/net/bpf_jit_comp32.c.) ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2021-29154

Published: 2021-04-17

BDU:2021-02346

Уязвимость компонента kernel/bpf/verifier.c ядра операционной системы Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Severity: MEDIUM (5.5) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

CVE-2021-29155

Published: 2021-03-04

BDU:2021-04828

Уязвимость функции cipso_v4_genopt (net/ipv4/cipso_ipv4.c) ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2021-33033

Published: 2021-03-25

BDU:2022-03028

Уязвимость функции llcp_sock_connect() операционной системы Linux, позволяющая нарушителю повысить свои привилегии

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2020-25671

Published: 2021-03-25

BDU:2022-03139

Уязвимость функции llcp_sock_bind() протокола nfc ядра операционной системы Linux, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2020-25670

Published: 2021-05-26
Modified: 2024-11-21

CVE-2020-25670

A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2021-05-26
Modified: 2024-11-21

CVE-2020-25671

A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2021-04-09
Modified: 2024-11-21

CVE-2021-29154

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2021-04-20
Modified: 2024-11-21

CVE-2021-29155

An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References:

Published: 2021-05-15
Modified: 2024-11-21

CVE-2021-33033

The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Package alterator-vm updated to version 0.4.22-alt1 for branch sisyphus in task 270480.

В интерфейсе установщика меняется порядок при создании шифрованного раздела

Package SPICE updated to version 0.15.0-alt1 for branch sisyphus in task 270485.

Published: 2020-04-29

BDU:2021-03500

Уязвимость процесса декодирования изображений QUIC системы рендеринга удаленного виртуального рабочего стола SPICE, связанная с копированием буфера без проверки размера входных данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Severity: MEDIUM (6.6) Vector: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

References:

CVE-2020-14355

Published: 2020-12-01

BDU:2022-05884

Уязвимость системы рендеринга удаленного виртуального рабочего стола SPICE, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (5.3) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References:

CVE-2021-20201

Published: 2020-10-07
Modified: 2024-11-21

CVE-2020-14355

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution.

Severity: MEDIUM (6.6) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

References:

Published: 2021-05-28
Modified: 2024-11-21

CVE-2021-20201

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.

Severity: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References:

Package NetworkManager updated to version 1.30.4-alt1 for branch sisyphus in task 270501.

Published: 2021-03-25

BDU:2021-04599

Уязвимость свойства match.path программы управления сетевыми соединениями NetworkManager, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (5.5) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2021-20297

Published: 2021-05-27
Modified: 2024-11-21

CVE-2021-20297

A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References:

Package podman updated to version 3.1.2-alt1 for branch sisyphus in task 270510.

Published: 2021-02-02
Modified: 2024-11-21

CVE-2021-20199

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards.

Severity: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

References:

Version: 2.1.0

ALT-BU-2021-3871-1

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities