ROOT-OS-UBUNTU-2404-CVE-2025-21687 CVE-2025-21687 in rootio-linux - Patched by Root

Root has patched CVE-2025-21687 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

RHCOS 4 : OpenShift Container Platform 4.9.9 (RHSA-2021:4833)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4833 advisory. - jenkins: FilePathmkdirs does not check permission to create parent directories CVE-2021-21685 - jenkins: File path filters do not...

CVE-2026-21687

creationtimestamp| type| source ---|---|--- 2026-01-07 23:10:04+00:00| published-proof-of-concept| Telegram/2JvedLLs2h42jDOpZBWHAKvZnZL811K1YWZLSfKhihcdHY...

CVE-2026-21687 iccDEV has Undefined Behavior in CIccTagCurve::CIccTagCurve()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have Undefined Behavior in CIccTagCurve::CIccTagCurve. This vulnerability affects users of the iccD...

Linux Distros Unpatched Vulnerability : CVE-2020-21687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...

CVE-2022-21687

gh-ost is a triggerless online schema migration solution for MySQL. Versions prior to 1.1.3 are subject to an arbitrary file read vulnerability. The attacker must have access to the target host or trick an administrator into executing a malicious gh-ost command on a host running gh-ost, plus...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21687)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21687 advisory. - In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21687)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21687 advisory. - In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of...

CVE-2025-21687 affecting package kernel for versions less than 6.6.76.1-1

CVE-2025-21687 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2025-21687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can ...

Mageia: Security Advisory (MGASA-2025-0079)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-21687

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device...

CVE-2025-21687 vfio/platform: check the bounds of read/write syscalls

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device...

CVE-2025-21687

CVE-2025-21687 affects the Linux kernel’s vfio/platform code. The vulnerability arises because this path did not fully validate the combination of read/write syscall bounds with user-supplied count/offset, and only offset was capped to 40 bits. This can allow reading or writing beyond the device’...

CVE-2025-21687

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device...

CVE-2025-21687 vfio/platform: check the bounds of read/write syscalls

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device...

Atlassian Bamboo < 9.2.16 / < 9.6.4 File Inclusion (CVE-2024-21687)

The version of Atlassian Bamboo installed on the remote host is prior to 9.2.16 or 9.6.4. It is, therefore, affected by a file inclusion allows an authenticated attacker to get the application to display the contents of a local file, or execute a different files already stored locally on the serv...

CVE-2024-21687

creationtimestamp| type| source ---|---|--- 2024-07-16 23:49:00+00:00| seen| https://t.me/cvedetector/1008 2024-07-18 10:13:01+00:00| seen| https://t.me/HackingInsights/6469...

CVE-2024-21687

CVE-2024-21687 affects Atlassian Bamboo Data Center and Server (versions 9.0.0–9.6.0). The issue is a file inclusion vulnerability that allows an authenticated attacker to view local files or execute locally stored files due to the underlying logic described in the report. Impact is high on confi...

CVE-2020-21687

creationtimestamp| type| source ---|---|--- 2023-08-22 22:28:14+00:00| seen| https://t.me/cibsecurity/69027...