PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 11

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 11 / 30

  1. CVE-2020-19143libtiff: buffer overflow in TIFFVGetField() in libtiff/tif_dir.c
  2. CVE-2020-19131libtiff: a buffer overflow via the "invertImage()" may lead to DoS
  3. CVE-2020-18974nasm: buffer overflow in crc64i() nasmlib/crc64.c
  4. CVE-2020-18899exiv2: uncontrolled memory allocation in DataBufdata may lead to DoS
  5. CVE-2020-18898exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS
  6. CVE-2020-18839poppler: buffer overflow in HtmlOutputDev::page
  7. CVE-2020-18781audiofile: a Denial of Service via crafted file
  8. CVE-2020-18780nasm: use-after-free in new_Token() in asm/preproc.c
  9. CVE-2020-18774exiv2: float point exception in the printLong function in tags_int.cpp via a crafted tif file
  10. CVE-2020-18773exiv2: invalid memory access in the decode function in iptc.cpp via a crafted tif file
  11. CVE-2020-18771exiv2: buffer overflow in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp
  12. CVE-2020-18770zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c
  13. CVE-2020-18768libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c
  14. CVE-2020-18652exempi: denial of service via opening of crafted webp file
  15. CVE-2020-18651exempi: denial of service via opening of crafted audio file with ID3V2 frame
  16. CVE-2020-18442zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()
  17. CVE-2020-18032graphviz: off-by-one in parse_reclbl() in lib/common/shapes.c
  18. CVE-2020-17541libjpeg-turbo: Stack-based buffer overflow in the "transform" component
  19. CVE-2020-17538ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS
  20. CVE-2020-17527tomcat: HTTP/2 request header mix-up
  21. CVE-2020-17525subversion: Remote unauthenticated denial of service in mod_authz_svn
  22. CVE-2020-17521groovy: OS temporary directory leads to information disclosure
  23. CVE-2020-17507qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp
  24. CVE-2020-17498wireshark: Kafka protocol dissector could crash (wnpa-sec-2020-10)
  25. CVE-2020-17489gnome-shell: Password from logged-out user may be shown on login screen
  26. CVE-2020-17437Open-iSCSI: invalid handing of the TCP urgent data pointer
  27. CVE-2020-17380QEMU: heap buffer overflow in sdhci_sdma_transfer_multi_blocks() in hw/sd/sdhci.c
  28. CVE-2020-17049Kerberos: delegation constrain bypass in S4U2Proxy
  29. CVE-2020-16937dotnet: .NET Framework improperly handles objects in memory which could result in Information Disclosure
  30. CVE-2020-16845golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs
  31. CVE-2020-16599binutils: Null Pointer Dereference in _bfd_elf_get_symbol_version_string could result in DoS
  32. CVE-2020-16598binutils: Null Pointer Dereference in debug_get_real_type could result in DoS
  33. CVE-2020-16593binutils: Null Pointer Dereference in scan_unit_for_symbols could result in DoS
  34. CVE-2020-16592binutils: use-after-free in bfd_hash_lookup could result in DoS
  35. CVE-2020-16591binutils: invalid read in process_symbol_table could result in DoS
  36. CVE-2020-16590binutils: double free vulnerability in process_symbol_table could result in DoS
  37. CVE-2020-16589OpenEXR: A heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp could result in a DOS via a crafted EXR file
  38. CVE-2020-16588OpenEXR: A Null Pointer Deference in generatePreview in makePreview.cpp could result in a DOS via a crafted EXR file
  39. CVE-2020-16587OpenEXR: A heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp could result in a DOS via a crafted EXR file
  40. CVE-2020-16310ghostscript: division by zero in dot24_print_page() in devices/gdevdm24.c could result in a DoS
  41. CVE-2020-16309ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS
  42. CVE-2020-16308ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS
  43. CVE-2020-16307ghostscript: NULL pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS
  44. CVE-2020-16306ghostscript: NULL pointer dereference in devices/gdevtsep.c could result in a DoS
  45. CVE-2020-16305ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS
  46. CVE-2020-16304ghostscript: buffer overflow in image_render_color_thresh() in base/gxicolor.c could result in a DoS
  47. CVE-2020-16303ghostscript: use-after-free in xps_finish_image_path() in devices/vector/gdevxps.c could result in a privilege escalation
  48. CVE-2020-16302ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege escalation
  49. CVE-2020-16301ghostscript: buffer overflow in okiibm_print_page1() in devices/gdevokii.c could result in a DoS
  50. CVE-2020-16300ghostscript: buffer overflow in tiff12_print_page() in devices/gdevtfnx.c could result in a DoS
CVE 2020 document archive — Page 11 | PulseLinux