Поиск уязвимостей

Chromium: CVE-2021-4098 Insufficient data validation in Mojo

A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCPU context. An unprivileged local attacker on the host may use this flaw to cause a kernel oops condition and thus a denial of service by issuing a KVM_XEN_HVM_SET_ATTR ioctl. This flaw affects Linux kernel versions prior to 5.17-rc1.

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario.

An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw a local attacker with user privilege may gain access to out-of-bounds memory leading to a system integrity and confidentiality threat.

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalate their privileges on the system. This flaw affects Linux kernel versions prior to 5.16-rc4.

The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.

Use After Free in vim/vim

Chromium: CVE-2021-4068 Insufficient validation of untrusted input in new tab page

Chromium: CVE-2021-4067 Use after free in window manager

Chromium: CVE-2021-4066 Integer underflow in ANGLE

Chromium: CVE-2021-4065 Use after free in autofill

Chromium: CVE-2021-4064 Use after free in screen capture

Chromium: CVE-2021-4063 Use after free in developer tools

A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.

Chromium: CVE-2021-4062 Heap buffer overflow in BFCache

Chromium: CVE-2021-4061 Type Confusion in V8

Chromium: CVE-2021-4059 Insufficient data validation in loader

Chromium: CVE-2021-4058 Heap buffer overflow in ANGLE

Chromium: CVE-2021-4057 Use after free in file API

Chromium: CVE-2021-4056: Type Confusion in loader