CVE-2021-33190: Improper Restriction of Excessive Authentication Attempts

In Apache APISIX Dashboard version 2.6, we changed the default value of listen host to 0.0.0.0 in order to facilitate users to configure external network access. In the IP allowed list restriction, a risky function was used for the IP acquisition, which made it possible to bypass the network limi...

UVI-2021-1000706 NFS: fix an incorrect limit in filelayout_decode_layout()

NFS: fix an incorrect limit in filelayoutdecodelayout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.271 by commit...

UVI-2021-1000694 NFS: fix an incorrect limit in filelayout_decode_layout()

NFS: fix an incorrect limit in filelayoutdecodelayout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.271 by commit...

GSD-2021-1000678 NFS: fix an incorrect limit in filelayout_decode_layout()

NFS: fix an incorrect limit in filelayoutdecodelayout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.235 by commit...

GSD-2021-1000661 NFS: fix an incorrect limit in filelayout_decode_layout()

NFS: fix an incorrect limit in filelayoutdecodelayout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.193 by commit...

UVI-2021-1000637 NFS: fix an incorrect limit in filelayout_decode_layout()

NFS: fix an incorrect limit in filelayoutdecodelayout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit...

DEBIAN-CVE-2021-3491

The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...

CVE-2021-3491

The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin memrw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was...

PT-2021-29025

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.12.8 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25177

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.4.270 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29069

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.10.41 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25149

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.14.234 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29159

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25132

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.12.8 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25108

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.10.41 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29126

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29102

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.4.123 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...