CVE 2020 document archive · 2

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 2 / 30

51. CVE-2020-36242python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow→
52. CVE-2020-36241gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory→
53. CVE-2020-36230openldap: Assertion failure in ber_next_element in decode.c→
54. CVE-2020-36229openldap: Type confusion in ad_keystring in ad.c→
55. CVE-2020-36228openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c→
56. CVE-2020-36227openldap: Infinite loop in slapd with the cancel_extop Cancel operation→
57. CVE-2020-36226openldap: Denial of service via length miscalculation in slap_parse_user→
58. CVE-2020-36225openldap: Double free in the saslAuthzTo processing→
59. CVE-2020-36224openldap: Invalid pointer free in the saslAuthzTo processing→
60. CVE-2020-36223openldap: Out-of-bounds read in Values Return Filter→
61. CVE-2020-36222openldap: Assertion failure in slapd in the saslAuthzTo validation→
62. CVE-2020-36221openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c→
63. CVE-2020-36193Archive_Tar: directory traversal due to inadequate checking of symbolic links→
64. CVE-2020-36189jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource→
65. CVE-2020-36188jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource→
66. CVE-2020-36187jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource→
67. CVE-2020-36186jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource→
68. CVE-2020-36185jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource→
69. CVE-2020-36184jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource→
70. CVE-2020-36183jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool→
71. CVE-2020-36182jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS→
72. CVE-2020-36181jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS→
73. CVE-2020-36180jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS→
74. CVE-2020-36179jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS→
75. CVE-2020-36158kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value→
76. CVE-2020-36024poppler: NULL pointer dereference in `FoFiType1C::convertToType1`→
77. CVE-2020-36023poppler: Stack-Overflow in `FoFiType1C::cvtGlyph`→
78. CVE-2020-35738wavpack: out-of-bounds write in WavpackPackSamples function in pack_utils.c→
79. CVE-2020-35728jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool→
80. CVE-2020-35702poppler: heap-based buffer overflow via a crafted PDF document→
81. CVE-2020-35655python-pillow: Buffer over-read in SGI RLE image reader→
82. CVE-2020-35654python-pillow: decoding crafted YCbCr files could result in heap-based buffer overflow→
83. CVE-2020-35653python-pillow: Buffer over-read in PCX image reader→
84. CVE-2020-35538libjpeg-turbo: Null pointer dereference in jcopy_sample_rows() function→
85. CVE-2020-35535LibRaw: Out-of-bounds read in LibRaw::parseSonySRF() function→
86. CVE-2020-35534LibRaw: Memory corruption in "crxFreeSubbandData()" function→
87. CVE-2020-35533LibRaw: Out-of-bounds read in LibRaw::adobe_copy_pixel() function→
88. CVE-2020-35532LibRaw: Out-of-bounds read in simple_decode_row() function→
89. CVE-2020-35531LibRaw: Out-of-bounds read in get_huffman_diff() function→
90. CVE-2020-35530LibRaw: Out of bounds write in new_node() function→
91. CVE-2020-35527sqlite: Out of bounds access during table rename→
92. CVE-2020-35525sqlite: Null pointer derreference in src/select.c→
93. CVE-2020-35524libtiff: Heap-based buffer overflow in TIFF2PDF tool→
94. CVE-2020-35523libtiff: Integer overflow in tif_getimage.c→
95. CVE-2020-35522libtiff: Memory allocation failure in tiff2rgba→
96. CVE-2020-35521libtiff: Memory allocation failure in tiff2rgba→
97. CVE-2020-35519kernel: x25_bind out-of-bounds read→
98. CVE-2020-35518389-ds-base: information disclosure during the binding of a DN→
99. CVE-2020-35517QEMU: virtiofsd: potential privileged host device access from guest→
100. CVE-2020-35513kernel: Nfsd failure to clear umask after processing an open or create→