High WID-SEC-2022-0571 25 CVEs

Red Hat Enterprise Linux: Mehrere Schwachstellen

Published Nov 9, 2021 · Updated Jun 28, 2026 · Revision 51 · de-DE

Vendor: amazon Vendor: Avaya Vendor: Debian Vendor: gentoo Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Aura Experience Portal Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openshift Product: openSUSE Product: Rocky Linux Product: Security Verify Access Platform: Linux

Summary

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 25

High 7.8

CVE-2020-12762

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_…

json-c json-c json-c libfastjson Debian Ubuntu Azure Linux Alpine

May 9, 2020
High 7.8

CVE-2021-42771

Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

babel py3-babel python-babel babel Debian Azure Linux Alpine PyPI

Oct 20, 2021
Medium 6.1

CVE-2021-28957

lxml vulnerable to Cross-Site Scripting

An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attac…

lxml lxml lxml python-lxml Debian Ubuntu Azure Linux Alpine PyPI

Mar 21, 2021
Medium 5.7

CVE-2021-3572 Public exploit

Improper Input Validation in pip

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This i…

python-pip pip python-pip python-IPy Debian Ubuntu Azure Linux PyPI

Nov 10, 2021
Medium 5.5

CVE-2021-3602

Buildah processes using chroot isolation may leak environment values to intermediate processes

An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from parent and grandparent processes. When run in a co…

cri-o buildah podman buildah Debian Ubuntu Azure Linux Alpine Go

Mar 3, 2022
Unscored —

CVE-2019-17594

There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in n…

ncurses ncurses Debian Ubuntu

Oct 14, 2019
Unscored —

CVE-2019-17595

There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurse…

ncurses ncurses Debian Ubuntu

Oct 14, 2019
Unscored —

CVE-2019-18218

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows …

file file file Debian Ubuntu Alpine

Oct 21, 2019
Unscored —

CVE-2019-19004

A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input …

autotrace Ubuntu

Feb 11, 2021
Unscored —

CVE-2019-19005

A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitm…

autotrace Ubuntu

Feb 11, 2021
Unscored —

CVE-2020-17541

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a…

libjpeg-turbo libjpeg-turbo libjpeg-turbo Debian Ubuntu Azure Linux

Jun 1, 2021
Unscored —

CVE-2020-18442

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_…

zziplib zziplib Debian Ubuntu

Jun 18, 2021
Unscored —

CVE-2020-24370 Public exploit

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by ge…

lua5.4 lua lua5.3 Debian Azure Linux

Aug 17, 2020
Unscored —

CVE-2020-8037

ppp decapsulator can be convinced to allocate a large amount of memory

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.

The Tcpdump Group tcpdump tcpdump tcpdump Debian Ubuntu Azure Linux Alpine

Nov 4, 2020
Unscored —

CVE-2021-20095 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

python-babel Ubuntu

Apr 29, 2021
Unscored —

CVE-2021-29922

library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginn…

rustc rustc rust chromium-rust Debian Ubuntu Alpine

Aug 7, 2021
Unscored —

CVE-2021-3200

Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *te…

libsolv libsolv Debian Ubuntu

May 18, 2021
Unscored —

CVE-2021-3445

A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attack…

libdnf libdnf Debian Ubuntu

May 19, 2021
Unscored —

CVE-2021-3481

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting…

qt4-x11 qtsvg-opensource-src qtsvg-opensource-src Debian Ubuntu

Aug 22, 2022
Unscored —

CVE-2021-3565

A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inne…

tpm2-tools tpm2-tools tpm2-tools Debian Ubuntu Azure Linux

Jun 4, 2021
Unscored —

CVE-2021-3571

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture …

linuxptp Debian

Jul 9, 2021
Unscored —

CVE-2021-36084

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermissi…

libsepol libsepol Debian Ubuntu

Jul 1, 2021
Unscored —

CVE-2021-36085

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classper…

libsepol libsepol Debian Ubuntu

Jul 1, 2021
Unscored —

CVE-2021-36086

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set…

libsepol libsepol Debian Ubuntu

Jul 1, 2021
Unscored —

CVE-2021-36087

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_chec…

libsepol libsepol Debian Ubuntu

Jul 1, 2021

Revision history

2026-06-28 #51
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
2025-01-15 #50
Neue Updates von openSUSE aufgenommen
2024-10-21 #49
Neue Updates von Debian aufgenommen
2024-08-13 #48
Neue Updates von Amazon aufgenommen
2024-06-25 #47
Neue Updates von IBM aufgenommen
2024-05-30 #46
Neue Updates von SUSE aufgenommen
2024-05-06 #45
Neue Updates von Gentoo aufgenommen
2024-03-24 #44
Neue Updates von SUSE aufgenommen
2024-03-05 #43
Neue Updates von Red Hat aufgenommen
2024-02-19 #42
Neue Updates von Amazon aufgenommen
2024-02-05 #41
Neue Updates von Amazon aufgenommen
2024-01-30 #40
Neue Updates von Red Hat aufgenommen
2024-01-25 #39
Neue Updates von Red Hat aufgenommen
2023-12-13 #38
Neue Updates von Red Hat aufgenommen
2023-11-14 #37
Neue Updates von Red Hat aufgenommen
2023-11-07 #36
Neue Updates von Red Hat aufgenommen
2023-10-19 #35
Neue Updates von Amazon aufgenommen
2023-09-27 #34
Neue Updates von Amazon aufgenommen
2023-07-18 #33
Neue Updates von Red Hat aufgenommen
2023-06-08 #32
Neue Updates von Amazon aufgenommen
2023-05-23 #31
Neue Updates von Oracle Linux aufgenommen
2023-04-05 #30
Neue Updates von Amazon aufgenommen
2022-11-15 #29
Neue Updates von Oracle Linux aufgenommen
2022-11-01 #28
Neue Updates von SUSE aufgenommen
2022-10-16 #27
Neue Updates von Gentoo und SUSE aufgenommen

References

Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4158
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4172
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4201
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4221
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4222
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4236
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4270
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4288
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4316
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4321
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4374
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4382
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4408
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4413
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4426
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4455
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4464
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4510
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4513
Red Hat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4519
AVAYA Security Advisory ASA-2021-159 vom 2021-11-11
https://downloads.avaya.com/css/P8/documents/101078544
Red Hat Security Advisory RHSA-2021:4032 vom 2021-11-17
https://access.redhat.com/errata/RHSA-2021:4032
Oracle Linux Security Advisory ELSA-2021-4382 vom 2021-11-16
https://linux.oracle.com/errata/ELSA-2021-4382.html
Oracle Linux Security Advisory ELSA-2021-4222 vom 2021-11-17
https://linux.oracle.com/errata/ELSA-2021-4222.html
Oracle Linux Security Advisory ELSA-2021-4221 vom 2021-11-17
https://linux.oracle.com/errata/ELSA-2021-4221.html
Red Hat Security Advisory RHSA-2021:4848 vom 2021-11-29
https://access.redhat.com/errata/RHSA-2021:4848
Red Hat Security Advisory RHSA-2021:4845 vom 2021-11-29
https://access.redhat.com/errata/RHSA-2021:4845
SUSE Security Update SUSE-SU-2021:3945-1 vom 2021-12-06
https://lists.suse.com/pipermail/sle-security-updates/2021-December/009858.html
SUSE Security Update SUSE-SU-2021:4002-1 vom 2021-12-13
https://lists.suse.com/pipermail/sle-security-updates/2021-December/009887.html
SUSE Security Update SUSE-SU-2021:4001-1 vom 2021-12-13
https://lists.suse.com/pipermail/sle-security-updates/2021-December/009888.html
SUSE Security Update SUSE-SU-2021:4051-1 vom 2021-12-14
https://lists.suse.com/pipermail/sle-security-updates/2021-December/009896.html
SUSE Security Update SUSE-SU-2021:4155-1 vom 2021-12-22
https://lists.suse.com/pipermail/sle-security-updates/2021-December/009927.html
SUSE Security Update SUSE-SU-2022:0064-1 vom 2022-01-12
https://lists.suse.com/pipermail/sle-security-updates/2022-January/010000.html
Ubuntu Security Notice USN-5241-1 vom 2022-01-19
https://ubuntu.com/security/notices/USN-5241-1
SUSE Security Update SUSE-SU-2022:0184-1 vom 2022-01-25
https://lists.suse.com/pipermail/sle-security-updates/2022-January/010072.html
Red Hat Security Advisory RHSA-2022:0318 vom 2022-01-27
https://access.redhat.com/errata/RHSA-2022:0318
Amazon Linux Security Advisory ALAS-2022-1742 vom 2022-01-27
https://alas.aws.amazon.com/AL2/ALAS-2022-1742.html
Red Hat Security Advisory RHSA-2022:0434 vom 2022-02-04
https://access.redhat.com/errata/RHSA-2022:0434
SUSE Security Update SUSE-SU-2022:0184-2 vom 2022-02-17
https://lists.suse.com/pipermail/sle-security-updates/2022-February/010235.html
Amazon Linux Security Advisory ALAS-2022-030 vom 2022-02-26
https://alas.aws.amazon.com/AL2022/ALAS-2022-030.html
SUSE Security Update SUSE-SU-2022:23018-1 vom 2022-03-04
https://lists.suse.com/pipermail/sle-security-updates/2022-March/010347.html
Red Hat Security Advisory RHSA-2022:0856 vom 2022-03-14
https://access.redhat.com/errata/RHSA-2022:0856
Ubuntu Security Notice USN-5391-1 vom 2022-04-27
https://ubuntu.com/security/notices/USN-5391-1
Oracle Linux Security Advisory ELSA-2022-9341 vom 2022-04-28
https://linux.oracle.com/errata/ELSA-2022-9341.html
Red Hat Security Advisory RHSA-2022:5498 vom 2022-07-05
https://access.redhat.com/errata/RHSA-2022:5498
Amazon Linux Security Advisory ALAS-2022-093 vom 2022-07-21
https://alas.aws.amazon.com/AL2022/ALAS-2022-093.html
Ubuntu Security Notice USN-5553-1 vom 2022-08-08
https://ubuntu.com/security/notices/USN-5553-1
Gentoo Linux Security Advisory GLSA-202208-03 vom 2022-08-09
https://security.gentoo.org/glsa/202208-03
SUSE Security Update SUSE-SU-2022:3001-1 vom 2022-09-02
https://lists.suse.com/pipermail/sle-security-updates/2022-September/012070.html
Ubuntu Security Notice USN-5631-1 vom 2022-09-22
https://ubuntu.com/security/notices/USN-5631-1
Gentoo Linux Security Advisory GLSA-202210-09 vom 2022-10-16
https://security.gentoo.org/glsa/202210-09
SUSE Security Update SUSE-SU-2022:3590-1 vom 2022-10-14
https://lists.suse.com/pipermail/sle-security-updates/2022-October/012537.html
SUSE Security Update SUSE-SU-2022:3836-1 vom 2022-11-01
https://lists.suse.com/pipermail/sle-security-updates/2022-November/012792.html
Oracle Linux Security Advisory ELSA-2022-7529 vom 2022-11-15
https://linux.oracle.com/errata/ELSA-2022-7529.html
Red Hat Security Advisory RHSA-2024:0411 vom 2024-01-25
https://access.redhat.com/errata/RHSA-2024:0411
Amazon Linux Security Advisory ALAS-2023-2010 vom 2023-04-05
https://alas.aws.amazon.com/AL2/ALAS-2023-2010.html
Red Hat Security Advisory RHSA-2024:1086 vom 2024-03-05
https://access.redhat.com/errata/RHSA-2024:1086
Red Hat Security Advisory RHSA-2024:1154 vom 2024-03-06
https://access.redhat.com/errata/RHSA-2024:1154
Red Hat Security Advisory RHSA-2023:7820 vom 2023-12-14
https://access.redhat.com/errata/RHSA-2023:7820
Red Hat Security Advisory RHSA-2024:0573 vom 2024-01-30
https://access.redhat.com/errata/RHSA-2024:0573
Oracle Linux Security Advisory ELSA-2023-12349 vom 2023-05-24
http://linux.oracle.com/errata/ELSA-2023-12349.html
Amazon Linux Security Advisory ALAS2-2023-2079 vom 2023-06-08
https://alas.aws.amazon.com/AL2/ALAS-2023-2079.html
Red Hat Security Advisory RHSA-2023:4053 vom 2023-07-19
https://access.redhat.com/errata/RHSA-2023:4053
Amazon Linux Security Advisory ALAS-2024-1921 vom 2024-02-19
https://alas.aws.amazon.com/ALAS-2024-1921.html
Amazon Linux Security Advisory ALAS-2024-1921 vom 2024-02-19
https://www.cybersecurity-help.cz/vdb/SB2024021950
Amazon Linux Security Advisory ALAS-2024-1918 vom 2024-02-06
https://alas.aws.amazon.com/ALAS-2024-1918.html
Amazon Linux Security Advisory ALASSELINUX-NG-2023-001 vom 2023-09-27
https://alas.aws.amazon.com/AL2/ALASSELINUX-NG-2023-001.html
Amazon Linux Security Advisory ALAS2-2023-2307 vom 2023-10-20
https://alas.aws.amazon.com/AL2/ALAS-2023-2307.html
Red Hat Security Advisory RHSA-2023:6431 vom 2023-11-07
https://access.redhat.com/errata/RHSA-2023:6431
Red Hat Security Advisory RHSA-2023:6976 vom 2023-11-15
https://access.redhat.com/errata/RHSA-2023:6976
SUSE Security Update SUSE-SU-2024:0970-1 vom 2024-03-22
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018191.html
Gentoo Linux Security Advisory GLSA-202405-20 vom 2024-05-07
https://security.gentoo.org/glsa/202405-20
SUSE Security Update SUSE-SU-2024:1846-1 vom 2024-05-29
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018628.html
IBM Security Bulletin 7158789 vom 2024-06-26
https://www.ibm.com/support/pages/node/7158789
Amazon Linux Security Advisory ALAS-2024-2620 vom 2024-08-13
https://alas.aws.amazon.com/AL2/ALAS-2024-2620.html
Debian Security Advisory DLA-3930 vom 2024-10-22
https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html
openSUSE Security Update OPENSUSE-SU-2025:14647-1 vom 2025-01-15
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/L4RLODX5GVSAY4VHIRZHWG4EEKI7MMMM/
Rocky Linux Security Advisory RLSA-2023:6976 vom 2026-06-27
https://errata.build.resf.org/RLSA-2023:6976