PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 17

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 17 / 30

  1. CVE-2020-14356kernel: Use After Free vulnerability in cgroup BPF component
  2. CVE-2020-14355spice: multiple buffer overflow vulnerabilities in QUIC decoding code
  3. CVE-2020-14354c-ares: ares_destroy() with pending ares_getaddrinfo() leads to Use-After-Free
  4. CVE-2020-14353kernel: keys: for keyctl prevent creating a different user's keyrings in RHEL-6.10
  5. CVE-2020-14352librepo: missing path validation in repomd.xml may lead to directory traversal
  6. CVE-2020-14351kernel: performance counters race condition use-after-free
  7. CVE-2020-14350postgresql: Uncontrolled search path element in CREATE EXTENSION
  8. CVE-2020-14349postgresql: Uncontrolled search path element in logical replication
  9. CVE-2020-14347xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c
  10. CVE-2020-14346xorg-x11-server: Integer underflow in the X input extension protocol
  11. CVE-2020-14345xorg-x11-server: Out-of-bounds access in XkbSetNames function
  12. CVE-2020-14344libX11: Heap overflow in the X input method client
  13. CVE-2020-14343PyYAML: incomplete fix for CVE-2020-1747
  14. CVE-2020-14342cifs-utils: shell command injection in mount.cifs
  15. CVE-2020-14339libvirt: leak of /dev/mapper/control into QEMU guests
  16. CVE-2020-14331kernel: kernel: buffer over write in vgacon_scroll
  17. CVE-2020-14326RESTEasy: Caching routes in RootNode may result in DoS
  18. CVE-2020-14323samba: Unprivileged user can crash winbind
  19. CVE-2020-14318samba: Missing handle permissions check in SMB1/2/3 ChangeNotify
  20. CVE-2020-14314kernel: buffer uses out of index in ext3/4 filesystem
  21. CVE-2020-14312dnsmasq: insecure default configuration makes it an open resolver
  22. CVE-2020-14311grub2: Integer overflow in grub_ext2_read_link leads to heap-based buffer overflow
  23. CVE-2020-14310grub2: Integer overflow read_section_as_string may lead to heap-based buffer overflow
  24. CVE-2020-14309grub2: Integer overflow in grub_squash_read_symlink may lead to heap-based buffer overflow
  25. CVE-2020-14308grub2: grub_malloc does not validate allocation size allowing for arithmetic overflow and subsequent heap-based buffer overflow
  26. CVE-2020-14305kernel: memory corruption in Voice over IP nf_conntrack_h323 module
  27. CVE-2020-14304kernel: ethtool when reading eeprom of device could lead to memory leak
  28. CVE-2020-14303samba: Empty UDP packet DoS in Samba AD DC nbtd
  29. CVE-2020-14301libvirt: leak of sensitive cookie information via dumpxml
  30. CVE-2020-14195jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory
  31. CVE-2020-14155pcre: Integer overflow when parsing callout numeric arguments
  32. CVE-2020-14154mutt: TLS mishandling during connection
  33. CVE-2020-14153libjpeg: out-of-bounds read for certain table pointers in jdhuff.c
  34. CVE-2020-14152libjpeg: improper handling of max_memory_to_use setting can lead to excessive memory consumption
  35. CVE-2020-14151libjpeg: read_*_pixel functions in rdtarga.c in cjpeg mishandles EOF
  36. CVE-2020-14150bison: allows attackers to cause a denial of service
  37. CVE-2020-14147redis: integer overflow in the getnum function in lua_struct.c could lead to a DoS
  38. CVE-2020-14145openssh: Observable discrepancy leading to an information leak in the algorithm negotiation
  39. CVE-2020-14093mutt: IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response
  40. CVE-2020-14062jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool
  41. CVE-2020-14061jackson-databind: serialization in weblogic/oracle-aqjms
  42. CVE-2020-14060jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool
  43. CVE-2020-14059squid: DoS when processing objects in an SMP cache due to an incorrect synchronization
  44. CVE-2020-14058squid: DoS in TLS handshake
  45. CVE-2020-14040golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash
  46. CVE-2020-14019python-rtslib: weak permissions for /etc/target/saveconfig.json
  47. CVE-2020-13988Open-iSCSI: counter wraparound resulting in infinite loop
  48. CVE-2020-13987Open-iSCSI: OOB read in checksum calculation in uIP
  49. CVE-2020-13974kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c
  50. CVE-2020-13962qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications
CVE 2020 document archive — Page 17 | PulseLinux