Redhat: >> Enterprise Linux >> 7.0 Security Vulnerabilities
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-05-27
Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file.
CVSS Score
7.8
EPSS Score
0.002
Published
2021-05-27
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-05-27
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of service via a crafted PDF file.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-05-26
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(), PdfTokenizer::GetNextVariant() and PdfTokenizer::ReadDataType() functions can lead to a stack overflow.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-05-26
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp can lead to a stack overflow.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-05-26
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
CVSS Score
9.8
EPSS Score
0.004
Published
2021-05-21
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
CVSS Score
9.8
EPSS Score
0.006
Published
2021-05-21
A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-05-21
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-05-21