PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 18

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 18 / 30

  1. CVE-2020-13959velocity: XSS in the default error page for VelocityView
  2. CVE-2020-13956apache-httpclient: incorrect handling of malformed authority component in request URIs
  3. CVE-2020-13950httpd: mod_proxy NULL pointer dereference
  4. CVE-2020-13943tomcat: Apache Tomcat HTTP/2 Request mix-up
  5. CVE-2020-13938httpd: Improper Handling of Insufficient Privileges
  6. CVE-2020-13936velocity: arbitrary code execution when attacker is able to modify templates
  7. CVE-2020-13935tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS
  8. CVE-2020-13934tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS
  9. CVE-2020-13902ImageMagick: heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding
  10. CVE-2020-13871sqlite: use-after-free in resetAccumulator in select.c
  11. CVE-2020-13867targetcli: weak permissions for /etc/target and backup files
  12. CVE-2020-13844kernel: ARM straight-line speculation vulnerability
  13. CVE-2020-13817ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS
  14. CVE-2020-13800QEMU: ati-vga: infinite recursion in ati_mm_read/write calls may lead to DoS
  15. CVE-2020-13791QEMU: ati-vga: OOB access while reading PCI configuration may lead to DoS
  16. CVE-2020-13790libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c
  17. CVE-2020-13777gnutls: session resumption works without master key allowing MITM
  18. CVE-2020-13776systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits
  19. CVE-2020-13765QEMU: loader: OOB access while loading registered ROM may lead to code execution
  20. CVE-2020-13754QEMU: msix: OOB access during mmio operations may lead to DoS
  21. CVE-2020-13753webkitgtk: Improper access management to CLONE_NEWUSER and the TIOCSTI ioctl
  22. CVE-2020-13692postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML
  23. CVE-2020-13659QEMU: exec: address_space_map returns NULL without setting length to zero may lead to DoS
  24. CVE-2020-13645glib-networking: GTlsClientConnection silently ignores unset server identity
  25. CVE-2020-13632sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query
  26. CVE-2020-13631sqlite: Virtual table can be renamed into the name of one of its shadow tables
  27. CVE-2020-13630sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c
  28. CVE-2020-13584webkitgtk: use-after-free may lead to arbitrary code execution
  29. CVE-2020-13558webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution
  30. CVE-2020-13543webkitgtk: use-after-free may lead to arbitrary code execution
  31. CVE-2020-13529systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured
  32. CVE-2020-13435sqlite: NULL pointer dereference in sqlite3ExprCodeTarget()
  33. CVE-2020-13434sqlite: integer overflow in sqlite3_str_vappendf function in printf.c
  34. CVE-2020-13430grafana: XSS via the OpenTSDB datasource
  35. CVE-2020-13401docker: IPv6 router advertisements allow for MitM attacks
  36. CVE-2020-13398freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c
  37. CVE-2020-13397freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c
  38. CVE-2020-13396freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.
  39. CVE-2020-13379grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL
  40. CVE-2020-13362QEMU: megasas: OOB read access due to invalid index leads to DoS
  41. CVE-2020-13361QEMU: es1370: OOB access due to incorrect frame count leads to DoS
  42. CVE-2020-13253QEMU: sd: OOB access could crash the guest resulting in DoS
  43. CVE-2020-13249mariadb-connector-c: Improper validation of content in a OK packet received from server
  44. CVE-2020-13164wireshark: NFS dissector crash (wnpa-sec-2020-08)
  45. CVE-2020-13143kernel: usb: gadget: illegal array access in binding with UDC
  46. CVE-2020-13114libexif: unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time
  47. CVE-2020-13113libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free
  48. CVE-2020-13112libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS
  49. CVE-2020-12965hw: amd: Spectre based on Linear Address Masking
  50. CVE-2020-12931hw: amd: Improper handling in the ASP kernel leading to loss of integrity
CVE 2020 document archive — Page 18 | PulseLinux