PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 12

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 12 / 30

  1. CVE-2020-16299ghostscript: division by zero in bj10v_print_page() in contrib/japanese/gdev10v.c could result in a DoS
  2. CVE-2020-16298ghostscript: buffer overflow in mj_color_correct() in contrib/japanese/gdevmjc.c could result in a DoS
  3. CVE-2020-16297ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS
  4. CVE-2020-16296ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS
  5. CVE-2020-16295ghostscript: NULL pointer dereference in clj_media_size() in devices/gdevclj.c could result in a DoS
  6. CVE-2020-16294ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS
  7. CVE-2020-16293ghostscript: NULL pointer dereference in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c could result in a DoS
  8. CVE-2020-16292ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS
  9. CVE-2020-16291ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS
  10. CVE-2020-16290ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS
  11. CVE-2020-16289ghostscript: buffer overflow in cif_print_page() in devices/gdevcif.c could result in a DoS
  12. CVE-2020-16288ghostscript: buffer overflow in pj_common_print_page() in devices/gdevpjet.c could result in a DoS
  13. CVE-2020-16287ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS
  14. CVE-2020-16166kernel: information exposure in drivers/char/random.c and kernel/time/timer.c
  15. CVE-2020-16156perl-CPAN: Bypass of verification of signatures in CHECKSUMS files
  16. CVE-2020-16154perl-App-cpanminus: Bypass of verification of signatures in CHECKSUMS files
  17. CVE-2020-16135libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL
  18. CVE-2020-16125gdm: inability to timely contact accountservice via dbus leads gnome-initial-setup to creation of account with admin privileges
  19. CVE-2020-16123pulseaudio: race condition in snap policy module allows for information exposure
  20. CVE-2020-16122PackageKit: local user could possibly use this issue to install untrusted packages
  21. CVE-2020-16121PackageKit: local attacker could use this issue to learn the MIME type of any file on the system
  22. CVE-2020-16120kernel: incorrect unprivileged overlayfs permission checking may lead to information disclosure
  23. CVE-2020-16119kernel: DCCP CCID structure use-after-free may lead to DoS or code execution
  24. CVE-2020-16117evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server
  25. CVE-2020-16116ark: maliciously crafted archive can install files anywhere in the user's home directory
  26. CVE-2020-16092QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c
  27. CVE-2020-16048Mozilla: Buffer overflow in depth pitch calculations for compressed textures
  28. CVE-2020-16044Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk
  29. CVE-2020-16042chromium-browser: Uninitialized Use in V8
  30. CVE-2020-16012Mozilla: Variable time processing of cross-origin images during drawImage calls
  31. CVE-2020-15999freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png
  32. CVE-2020-15969chromium-browser: Use after free in WebRTC
  33. CVE-2020-15945lua: segmentation fault in changedline in ldebug.c
  34. CVE-2020-15900ghostscript: Memory Corruption in Ghostscript 9.52 (SAFER Sandbox Breakout)
  35. CVE-2020-15889lua: heap-based buffer over-read in lgc.c
  36. CVE-2020-15888lua: stack resizes and garbage collection leads to heap-based buffer overflow
  37. CVE-2020-15863QEMU: stack-based overflow in xgmac_enet_send() in hw/net/xgmac.c
  38. CVE-2020-15862net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution
  39. CVE-2020-15861net-snmp: combination with can lead to elevated permissions to root
  40. CVE-2020-15859QEMU: net: e1000e: use-after-free while sending packets
  41. CVE-2020-15852xen: Linux ioperm bitmap context switching issues
  42. CVE-2020-15811squid: HTTP Request Splitting could result in cache poisoning
  43. CVE-2020-15810squid: HTTP Request Smuggling could result in cache poisoning
  44. CVE-2020-15802hardware: BLURtooth: "Dual mode" hardware using CTKD are vulnerable to key overwrite
  45. CVE-2020-15801python: sys.path allowing code to be loaded from arbitrary locations
  46. CVE-2020-15780kernel: lockdown: bypass through ACPI write via acpi_configfs
  47. CVE-2020-15778openssh: scp allows command injection when using backtick characters in the destination argument
  48. CVE-2020-15720pki: Dogtag's python client does not validate certificates
  49. CVE-2020-15719openldap: Certificate validation incorrectly matches name against CN-ID
  50. CVE-2020-15708libvirt: incorrect permissions on the UNIX domain socket allows local attacker to escalate privileges
CVE 2020 document archive — Page 12 | PulseLinux