CVE 2020 document archive · 19
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,491 documents · Identifier year 2020 · 19 / 30
- CVE-2020-12930hw: amd: Improper handling in ASP drivers leading to loss of integrity
- CVE-2020-12912kernel: unprivileged access to RAPL allows for side channel attacks
- CVE-2020-12888Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario
- CVE-2020-12867sane-backends: NULL pointer dereference in sanei_epson_net_read function
- CVE-2020-12866sane-backends: null pointer dereference in epsonds_net_read in epsonds-net.c
- CVE-2020-12865sane-backends: Heap buffer overflow in esci2_img
- CVE-2020-12864sane-backends: Reading uninitialized data in epsonds_net_read in epsonds-net.c
- CVE-2020-12863sane-backends: Out-of-bounds read in esci2_check_header
- CVE-2020-12862sane-backends: Out-of-bounds read in decode_binary
- CVE-2020-12861sane-backends: Heap buffer overflow in epsonds_net_read in epsonds-net.c
- CVE-2020-12831frr: default permission issue eases information leaks
- CVE-2020-12829qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c
- CVE-2020-12826kernel: possible to send arbitrary signals to a privileged (suidroot) parent process
- CVE-2020-12825libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c
- CVE-2020-12803libreoffice: forms allowed to be submitted to any URI could result in local file overwrite
- CVE-2020-12802libreoffice: 'stealth mode' remote resource restrictions bypass
- CVE-2020-12801libreoffice: crash recovered MSOffice encrypted documents defaulted to not to using encryption on next save
- CVE-2020-12771kernel: deadlock if a coalescing operation fails in btree_gc_coalesce function in drivers/md/bcache/btree.c
- CVE-2020-12770kernel: sg_write function lacks an sg_remove_request call in a certain failure case
- CVE-2020-12769kernel: DoS via concurrent calls to dw_spi_irq and dw_spi_transfer_one functions in drivers/spi/spi-dw.c
- CVE-2020-12768kernel: memory leak in svm_cpu_init function in arch/x86/kvm/svm.c
- CVE-2020-12767libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c
- CVE-2020-12762libfastjson: integer overflow and out-of-bounds write via a large JSON file
- CVE-2020-12723perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS
- CVE-2020-12695hostapd: UPnP SUBSCRIBE misbehavior in WPS AP
- CVE-2020-12674dovecot: Crash due to assert in RPA implementation
- CVE-2020-12673dovecot: Out of bound reads in dovecot NTLM implementation
- CVE-2020-12663unbound: infinite loop via malformed DNS answers received from upstream servers
- CVE-2020-12662unbound: amplification of an incoming query into a large number of queries directed to a target
- CVE-2020-12659kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption
- CVE-2020-12657kernel: use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body
- CVE-2020-12656kernel: gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation lacks certain domain_release calls, leading to a memory leak.
- CVE-2020-12655kernel: sync of excessive duration via an XFS v5 image with crafted metadata
- CVE-2020-12654kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c
- CVE-2020-12653kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c
- CVE-2020-12652kernel: race condition in __mptctl_ioctl function in drivers/message/fusion/mptctl.c allows local users to hold an incorrect lock during the ioctl operation
- CVE-2020-12465kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c
- CVE-2020-12464kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c
- CVE-2020-12459grafana: information disclosure through world-readable grafana configuration files
- CVE-2020-12458grafana: information disclosure through world-readable /var/lib/grafana/grafana.db
- CVE-2020-12430libvirt: memory leak in domstats may allow read-only user to perform DoS attack
- CVE-2020-12426Mozilla: Memory safety bugs fixed in Thunderbird 78
- CVE-2020-12425Mozilla: Out of bound read in Date.parse()
- CVE-2020-12424Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process
- CVE-2020-12423Mozilla: DLL Hijacking due to searching %PATH% for a library
- CVE-2020-12422Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer
- CVE-2020-12421Mozilla: Add-On updates did not respect the same certificate trust rules as software updates
- CVE-2020-12420Mozilla: Use-After-Free when trying to connect to a STUN server
- CVE-2020-12419Mozilla: Use-after-free in nsGlobalWindowInner
- CVE-2020-12418Mozilla: Information disclosure due to manipulated URL object