Most recent entries from all

bdu:2021-04153

certfr-2021-avi-788 — De multiples vulnérabilités ont été découvertes dans IBM Cloud Foundry Migration Runtime. Certaines d'entre elles perme…

certfr-2021-avi-788

EUVD-2026-243496

fkie_cve-2021-33910

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

GHSA-5337-wcgc-wcvp

basic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

gsd-2021-33910

ICSA-22-167-09 — Siemens SCALANCE LPE9403 Third-Party Vulnerabilities

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP. The use of alloca function with an uncontrolled size in function unit_name_path_escape allows a local attacker, able to mount a filesystem on a very long path, to crash systemd and the whole system by allocating a very large space in the stack. A race condition vulnerability was found in Go. The incoming requests body weren't closed after the handler panic and as a consequence this could lead to ReverseProxy crash. The fix for CVE-2021-33196 can be bypassed by crafted inputs. As a result, the NewReader and OpenReader functions in archive/zip can still cause a panic or an unrecoverable fatal error when reading an archive that claims to contain a large number of files, regardless of its actual size. A vulnerability was found in Moby (Docker Engine) where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permi…

msrc_CVE-2021-33910 — basic/unit-name.c in systemd prior to 246.15 247.8 248.5 and 249.1 has a Memory Allocation with an Excessive Size Value…

msrc_CVE-2021-33910

OESA-2021-1271 — systemd security update

Affected: openEuler:20.03-LTS-SP1: systemd, openEuler:20.03-LTS-SP2: systemd

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fix(es): basic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.(CVE-2021-33910)

openSUSE-SU-2021:1082-1 — Security update for systemd

Security update for systemd

RHSA-2021:2721 — Red Hat Security Advisory: systemd security update

systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

SUSE-SU-2021:2404-1 — Security update for systemd

Security update for systemd

UBUNTU-CVE-2021-33910

Affected: Ubuntu:Pro:16.04:LTS: systemd, Ubuntu:18.04:LTS: systemd, Ubuntu:20.04:LTS: systemd