PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 1 / 30

  1. CVE-2020-37127dnsmasq: dnsmasq-utils 'dhcp_release' Denial of Service
  2. CVE-2020-37011gnome-font-viewer: Gnome Fonts Viewer: Denial of Service via malicious TTF font file
  3. CVE-2020-36791kernel: net_sched: keep alloc_hash updated after hash allocation
  4. CVE-2020-36790kernel: nvmet: fix a memory leak
  5. CVE-2020-36789kernel: can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context
  6. CVE-2020-36788kernel: drm/nouveau: avoid a use-after-free when BO init fails
  7. CVE-2020-36787kernel: media: aspeed: fix clock handling logic
  8. CVE-2020-36786kernel: media: [next] staging: media: atomisp: fix memory leak of object flash
  9. CVE-2020-36785kernel: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()
  10. CVE-2020-36784kernel: i2c: cadence: fix reference leak when pm_runtime_get_sync fails
  11. CVE-2020-36783kernel: i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
  12. CVE-2020-36782kernel: i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
  13. CVE-2020-36781kernel: i2c: imx: fix reference leak when pm_runtime_get_sync fails
  14. CVE-2020-36780kernel: i2c: sprd: fix reference leak when pm_runtime_get_sync fails
  15. CVE-2020-36779kernel: i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails
  16. CVE-2020-36778kernel: i2c: xiic: fix reference leak when pm_runtime_get_sync fails
  17. CVE-2020-36777kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()
  18. CVE-2020-36776kernel: thermal/drivers/cpufreq_cooling: Fix slab OOB issue
  19. CVE-2020-36775kernel: potential deadlock in f2fs_write_single_data_page
  20. CVE-2020-36774glade: segmentation fault in glade_gtk_box_post_create()
  21. CVE-2020-36773Ghostscript: out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite)
  22. CVE-2020-36766kernel: memory leak in drivers/media/cec/core/cec-api.c
  23. CVE-2020-36694kernel: netfilter: use-after-free in the packet processing context
  24. CVE-2020-36691kernel: lib/nlattr.c allows attackers to cause a denial of service
  25. CVE-2020-36649papaparse: RegExp used to detect numbers is vulnerable to ReDoS
  26. CVE-2020-36627go-macaron: Open redirect vulnerability in go-macron
  27. CVE-2020-36604hapi/hoek: Prototype Pollution in @hapi/hoek
  28. CVE-2020-36558kernel: race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference
  29. CVE-2020-36557kernel: race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys, causing a use-after-free in con_shutdown().
  30. CVE-2020-36518jackson-databind: denial of service via a large depth of nested objects
  31. CVE-2020-36516kernel: off-path attacker may inject data or terminate victim's TCP session
  32. CVE-2020-36387kernel: use-after-free related to io_async_task_func() reference holding in fs/io_uring.c
  33. CVE-2020-36386kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() in net/bluetooth/hci_event.c
  34. CVE-2020-36385kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free
  35. CVE-2020-36332libwebp: excessive memory allocation when reading a file
  36. CVE-2020-36331libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c
  37. CVE-2020-36330libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c
  38. CVE-2020-36329libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c
  39. CVE-2020-36328libwebp: heap-based buffer overflow in WebPDecode*Into functions
  40. CVE-2020-36327rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source
  41. CVE-2020-36325jansson: out-of-bounds read in json_loads() due to a parsing error
  42. CVE-2020-36323rust: optimization for joining strings can cause uninitialized bytes to be exposed
  43. CVE-2020-36322kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations
  44. CVE-2020-36318rust: use-after-free or double free in VecDeque::make_contiguous
  45. CVE-2020-36317rust: memory safety violation in String::retain()
  46. CVE-2020-36314file-roller: directory traversal via directory symlink pointing outside of the target directory (incomplete fix for CVE-2020-11736)
  47. CVE-2020-36313kernel: KVM subsystem allows out-of-range access to memslots after a deletion
  48. CVE-2020-36312kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c
  49. CVE-2020-36311kernel: DoS by triggering destruction of a large SEV VM
  50. CVE-2020-36310kernel: infinite loop in set_memory_region_test in arch/x86/kvm/svm/svm.c for certain nested page faults
CVE 2020 document archive | PulseLinux