Redhat: >> Enterprise Linux >> 8.0 Security Vulnerabilities
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
CVSS Score
9.8
EPSS Score
0.004
Published
2021-05-21
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
CVSS Score
9.1
EPSS Score
0.006
Published
2021-05-21
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
CVSS Score
9.1
EPSS Score
0.001
Published
2021-05-21
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
CVSS Score
9.8
EPSS Score
0.006
Published
2021-05-21
A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-05-21
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score
9.8
EPSS Score
0.005
Published
2021-05-21
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
CVSS Score
9.1
EPSS Score
0.002
Published
2021-05-21
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
CVSS Score
9.1
EPSS Score
0.002
Published
2021-05-21
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
CVSS Score
7.5
EPSS Score
0.012
Published
2021-05-21
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.
CVSS Score
5.7
EPSS Score
0.001
Published
2021-05-20