CVE-2021-26890

Application Virtualization Remote Code Execution Vulnerability...

CVE-2021-26860

Windows App-V Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26890

Application Virtualization Remote Code Execution Vulnerability...

Remote code execution

Application Virtualization Remote Code Execution Vulnerability...

CVE-2021-26890

CVE-2021-26890 is associated with Microsoft Application Virtualization (App-V). CNNVD’s entry describes a code-injection vulnerability affecting App-V across a range of Windows client/server SKUs (e.g., Windows 10 versions 1809–20H2, Windows Server 2019/2022 variants, and Server Core builds). NVD...

CVE-2021-26890 Application Virtualization Remote Code Execution Vulnerability

...

Vulnerabilities fixed in Red Hat OpenShift Virtualization

Red Hat has released updates to address multiple vulnerabilities fixes in OpenShift Virtualization. A malicious party could vulnerabilities potentially exploit them to cause a denial-of-service cause. Red Hat has released updates to fix the vulnerabilities in OpenShift Virtualization. For more...

EulerOS Virtualization 2.9.0 : trousers (EulerOS-SA-2021-1659)

According to the versions of the trousers package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss use...

EulerOS Virtualization 2.9.0 : perl-DBI (EulerOS-SA-2021-1650)

According to the versions of the perl-DBI package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An untrusted pointer dereference flaw was found in Perl-DBI 1.643. A local attacker who is able to manipulate calls to...

EulerOS Virtualization 2.9.0 : cifs-utils (EulerOS-SA-2021-1664)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject...

EulerOS Virtualization 2.9.0 : nss (EulerOS-SA-2021-1640)

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the...

EulerOS Virtualization 2.9.0 : openldap (EulerOS-SA-2021-1638)

According to the version of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An...

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2021-1667)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPYAREA...

EulerOS Virtualization 2.9.0 : python-pip (EulerOS-SA-2021-1648)

According to the version of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a...

EulerOS Virtualization 2.9.0 : librepo (EulerOS-SA-2021-1655)

According to the version of the librepo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize...

EulerOS Virtualization 2.9.0 : libvirt (EulerOS-SA-2021-1666)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting informati...

EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2021-1637)

According to the version of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as...

EulerOS Virtualization 2.9.0 : glib2 (EulerOS-SA-2021-1644)

According to the version of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the...

EulerOS Virtualization 2.9.0 : freetype (EulerOS-SA-2021-1652)

According to the version of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap...

EulerOS Virtualization 2.9.0 : jbigkit (EulerOS-SA-2021-1651)

According to the version of the jbigkit package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting in a remote...