PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 16

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 16 / 30

  1. CVE-2020-14568mysql: InnoDB unspecified vulnerability (CPU Jul 2020)
  2. CVE-2020-14567mysql: Server: Replication unspecified vulnerability (CPU Jul 2020)
  3. CVE-2020-14562OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239)
  4. CVE-2020-14559mysql: Server: Information Schema unspecified vulnerability (CPU Jul 2020)
  5. CVE-2020-14556OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)
  6. CVE-2020-14553mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020)
  7. CVE-2020-14550mysql: C API unspecified vulnerability (CPU Jul 2020)
  8. CVE-2020-14547mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)
  9. CVE-2020-14540mysql: Server: DML unspecified vulnerability (CPU Jul 2020)
  10. CVE-2020-14539mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)
  11. CVE-2020-14422python: DoS via inefficiency in IPv{4,6}Interface classes
  12. CVE-2020-14416kernel: slcan : race over tty->disc_data can lead use-after-free
  13. CVE-2020-14415QEMU: division by zero in oss_write() in audio/ossaudio.c
  14. CVE-2020-14410SDL2: Heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file
  15. CVE-2020-14409SDL2: Integer overflow in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file
  16. CVE-2020-14405libvncserver: libvncclient/rfbproto.c does not limit TextChat size
  17. CVE-2020-14404libvncserver: libvncserver/rre.c allows out-of-bounds access via encodings
  18. CVE-2020-14403libvncserver: libvncserver/hextile.c allows out-of-bounds access via encodings
  19. CVE-2020-14402libvncserver: libvncserver/corre.c allows out-of-bounds access via encodings
  20. CVE-2020-14401libvncserver: libvncserver/scale.c has a pixel_value integer overflow
  21. CVE-2020-14400libvncserver: byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c
  22. CVE-2020-14399libvncserver: byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c
  23. CVE-2020-14398libvncserver: an improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  24. CVE-2020-14397libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference
  25. CVE-2020-14396libvncserver: libvncclient/tls_openssl.c has a NULL pointer dereference
  26. CVE-2020-14394QEMU: infinite loop in xhci_ring_chain_length() in hw/usb/hcd-xhci.c
  27. CVE-2020-14393perl-dbi: Buffer overflow on an overlong DBD class name
  28. CVE-2020-14392perl-dbi: Memory corruption in XS functions when Perl stack is reallocated
  29. CVE-2020-14391gnome-settings-daemon: Red Hat Customer Portal password logged and passed as command line argument when user registers through GNOME control center
  30. CVE-2020-14390kernel: out-of-bounds write in fbcon_redraw_softback
  31. CVE-2020-14387rsync: rsync-ssl does not verify the hostname in the server certificate when using openssl
  32. CVE-2020-14386kernel: memory corruption in net/packet/af_packet.c leads to elevation of privilege
  33. CVE-2020-14385kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt
  34. CVE-2020-14383samba: An authenticated user can crash the DCE/RPC DNS with easily crafted records
  35. CVE-2020-14382cryptsetup: Out-of-bounds write when validating segments
  36. CVE-2020-14381kernel: referencing inode of removed superblock in get_futex_key() causes UAF
  37. CVE-2020-14378dpdk: partial Denial of Service due to Integer Underflow
  38. CVE-2020-14377dpdk: write_back_data buffer over read (cipher->para.dst_data_len & desc->len)
  39. CVE-2020-14376dpdk: buffer overflow copying iv_data from guest to host (prepare_sym_cipher_op & prepare_sym_chain_op)
  40. CVE-2020-14375dpdk: time-of-check time-of-use vulnerabilities throughout vhost_crypto.c
  41. CVE-2020-14374dpdk: remote Code Execution in vhost_crypto (VM Escape)
  42. CVE-2020-14373ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS
  43. CVE-2020-14372grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled
  44. CVE-2020-14370podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API
  45. CVE-2020-14367chrony: Insecure writing to PID file
  46. CVE-2020-14364QEMU: usb: out-of-bounds r/w access issue while processing usb packets
  47. CVE-2020-14363libX11: integer overflow leads to double free in locale handling
  48. CVE-2020-14362xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability
  49. CVE-2020-14361xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability
  50. CVE-2020-14360xorg-x11-server: Out-of-bounds access in XkbSetMap function
CVE 2020 document archive — Page 16 | PulseLinux