PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 21

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 21 / 30

  1. CVE-2020-11985httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite
  2. CVE-2020-11984httpd: mod_proxy_uwsgi buffer overflow
  3. CVE-2020-11979ant: insecure temporary file
  4. CVE-2020-11958re2c: heap-based buffer overflow in Scanner::fill in parse/scanner.cc
  5. CVE-2020-11947QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure
  6. CVE-2020-11945squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution
  7. CVE-2020-11935kernel: panic hit by kube-proxy iptables-save/restore
  8. CVE-2020-11884Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation
  9. CVE-2020-11879evolution: attaching local filed/directories to composed email can lead to unintended information disclosure
  10. CVE-2020-11869qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS
  11. CVE-2020-11868ntp: DoS on client ntpd using server mode packet
  12. CVE-2020-11793webkitgtk: use-after-free via crafted web content
  13. CVE-2020-11765OpenEXR: off-by-one error in ImfXdr.h read function by DwaCompressor::Classifier::Classifier leading to an out-of-bounds read
  14. CVE-2020-11764OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp
  15. CVE-2020-11763OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp
  16. CVE-2020-11762OpenEXR: out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp
  17. CVE-2020-11761OpenEXR: out-of-bounds read during Huffman uncompression
  18. CVE-2020-11760OpenEXR: out-of-bounds read during RLE uncompression in rleUncompress function in ImfRle.cpp
  19. CVE-2020-11759OpenEXR: out-of-bounds write due to integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock
  20. CVE-2020-11758OpenEXR: out-of-bounds read in ImfOptimizedPixelReading.h
  21. CVE-2020-11736file-roller: directory traversal via directory symlink pointing outside of the target directory
  22. CVE-2020-11725kernel: improper handling of private_size*count multiplication due to count=info->owner typo
  23. CVE-2020-11669kernel: powerpc: guest can cause DoS on POWER9 KVM hosts
  24. CVE-2020-11668kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c
  25. CVE-2020-11656sqlite: use-after-free in the ALTER TABLE implementation
  26. CVE-2020-11655sqlite: malformed window-function query leads to DoS
  27. CVE-2020-11653varnish: remote clients may cause Varnish to assert and restart which could result in DoS
  28. CVE-2020-11647wireshark: BACapp dissector crash (wnpa-sec-2020-07)
  29. CVE-2020-11620jackson-databind: Serialization gadgets in commons-jelly:commons-jelly
  30. CVE-2020-11619jackson-databind: Serialization gadgets in org.springframework:spring-aop
  31. CVE-2020-11609kernel: NULL pointer dereference due to incorrect handling of invalid descriptors in stv06xx subsystem
  32. CVE-2020-11608kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c
  33. CVE-2020-11565kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c
  34. CVE-2020-11538python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2
  35. CVE-2020-11526freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later
  36. CVE-2020-11525freerdp: out-of-bounds read in bitmap.c
  37. CVE-2020-11524freerdp: Out-of-bounds write in interleaved.c
  38. CVE-2020-11523freerdp: Integer overflow in region.c
  39. CVE-2020-11522freerdp: out-of-bounds read in gdi.c
  40. CVE-2020-11521freerdp: Out-of-bounds write in planar.c
  41. CVE-2020-11501gnutls: DTLS client hello contains a random value of all zeroes
  42. CVE-2020-11494kernel: transmission of uninitialized data allows attackers to read sensitive information
  43. CVE-2020-11113jackson-databind: Serialization gadgets in org.apache.openjpa.ee.WASRegistryManagedRuntime
  44. CVE-2020-11112jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider
  45. CVE-2020-11111jackson-databind: Serialization gadgets in org.apache.activemq.jms.pool.XaPooledConnectionFactory
  46. CVE-2020-11102QEMU: tulip: OOB access in tulip_copy_tx_buffers
  47. CVE-2020-11100haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes
  48. CVE-2020-11099freerdp: out of bounds read in license_read_new_or_upgrade_license_packet
  49. CVE-2020-11098freerdp: out-of-bound read in glyph_cache_put
  50. CVE-2020-11097freerdp: out of bounds read in PRIMARY_DRAWING_ORDER_FIELD_BYTES
CVE 2020 document archive — Page 21 | PulseLinux