PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 13

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 13 / 30

  1. CVE-2020-15707grub2: Integer overflow in initrd size handling
  2. CVE-2020-15706grub2: Use-after-free redefining a function whilst the same function is already executing
  3. CVE-2020-15705grub2: Fail kernel validation without shim protocol
  4. CVE-2020-15704ppp: Privilege escalation through loading of arbitrary kernel modules and other programs
  5. CVE-2020-15685Mozilla: IMAP Response Injection when using STARTTLS
  6. CVE-2020-15684Mozilla: Memory safety bugs fixed in Firefox 82
  7. CVE-2020-15683Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4
  8. CVE-2020-15678Mozilla: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario
  9. CVE-2020-15677Mozilla: Download origin spoofing via redirect
  10. CVE-2020-15676Mozilla: XSS when pasting attacker-controlled data into a contenteditable element
  11. CVE-2020-15675firefox: Use-After-Free in WebGL could result in memory corruption and a potentially exploitable crash
  12. CVE-2020-15674firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code
  13. CVE-2020-15673Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3
  14. CVE-2020-15670Mozilla: Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2
  15. CVE-2020-15669Mozilla: Use-After-Free when aborting an operation
  16. CVE-2020-15667firefox: Invalid name length could result in a heap buffer overflow, leading to memory corruption
  17. CVE-2020-15665firefox: Address bar not reset when choosing to stay on a page after the beforeunload dialog is shown
  18. CVE-2020-15664Mozilla: Attacker-induced prompt for extension installation
  19. CVE-2020-15663Mozilla: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
  20. CVE-2020-15659Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11
  21. CVE-2020-15658Mozilla: Overriding file type when saving to disk
  22. CVE-2020-15657Mozilla: DLL hijacking due to incorrect loading path
  23. CVE-2020-15656Mozilla: Type confusion for special arguments in IonMonkey
  24. CVE-2020-15655Mozilla: Extension APIs could be used to bypass Same-Origin Policy
  25. CVE-2020-15654Mozilla: Custom cursor can overlay user interface
  26. CVE-2020-15653Mozilla: Bypassing iframe sandbox when allowing popups
  27. CVE-2020-15652Mozilla: Potential leak of redirect targets when loading scripts in a worker
  28. CVE-2020-15650Mozilla: Overwriting local files through malicious file picker application
  29. CVE-2020-15649Mozilla: Exfiltrating local files through malicious file picker application
  30. CVE-2020-15648Mozilla: X-Frame-Options bypass using object or embed tags
  31. CVE-2020-15646Mozilla: Automatic account setup leaks Microsoft Exchange login credentials
  32. CVE-2020-15586golang: data race in certain net/http servers including ReverseProxy can lead to DoS
  33. CVE-2020-15522bouncycastle: Timing issue within the EC math library
  34. CVE-2020-15503LibRaw: lack of thumbnail size range check can lead to buffer overflow
  35. CVE-2020-15469QEMU: MMIO ops null pointer dereference may lead to DoS
  36. CVE-2020-15466wireshark: GVCP dissector infinite loop
  37. CVE-2020-15437kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c
  38. CVE-2020-15436kernel: use-after-free in fs/block_dev.c
  39. CVE-2020-15393kernel: memory leak in usbtest_disconnect function in drivers/usb/misc/usbtest.c
  40. CVE-2020-15389openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor
  41. CVE-2020-15366nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function
  42. CVE-2020-15365LibRaw: out-of-bounds write in parse_exif function in metadata/exif_gps.cpp
  43. CVE-2020-15358sqlite: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener optimization in select.c
  44. CVE-2020-15306OpenEXR: Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp
  45. CVE-2020-15305OpenEXR: Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp
  46. CVE-2020-15304OpenEXR: An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp
  47. CVE-2020-15254Mozilla: Undefined behavior in bounded channel of crossbeam rust crate
  48. CVE-2020-15250junit4: TemporaryFolder is shared between all users across system which could result in information disclosure
  49. CVE-2020-15180mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep
  50. CVE-2020-15136etcd: no authentication is performed against endpoints provided in the --endpoints flag
CVE 2020 document archive — Page 13 | PulseLinux