CVEs published June 12, 2021
14 CVEs were published on June 12, 2021: 0 critical, 9 high.
- Published
- 14
- Critical
- 0
- High
- 9
- Medium
- 1
- Low
- 1
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 13
Most affected products
- Canonical apport
- 11
- Apache Software Foundation Apache PDFBox · org.apache.pd… +1
- 2
High 9
- CVE-2021-32555apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
- CVE-2021-32554apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
- CVE-2021-32553apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
- CVE-2021-32552apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
- CVE-2021-32551apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
- CVE-2021-32550apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
- CVE-2021-32549apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
- CVE-2021-32548apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
- CVE-2021-32547apport read_file() function could follow maliciously constructed symbolic linksCanonical apport
Medium, low and unrated 5
- CVE-2021-34682Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.
- CVE-2021-31811A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny fileApache Software Foundation Apache PDFBox · org.apache.pd… +1
- CVE-2021-31812A carefully crafted PDF file can trigger an infinite loop while loading the fileApache Software Foundation Apache PDFBox · org.apache.pd… +1
- CVE-2021-32557apport process_report() arbitrary file writeCanonical apport
- CVE-2021-32556apport get_modified_conffiles() function command injectionCanonical apport