Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-36087
3.3
LOWCVSS v3
Published
July 1, 2021
CVSS v2
2.1 LOW
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.
SELinuxProject/selinux
GitHubThis is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. All bugs and patches should be submitted to [email protected]
GitHubThis is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. All bugs and patches should be submitted to [email protected]= 3.2NVD
Crates.io
Docker Hub
NPM
RubyGems