PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 22

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 22 / 30

  1. CVE-2020-11096freerdp: out-of-bound read in update_read_cache_bitmap_v3_order
  2. CVE-2020-11095freerdp: out of bound reads resulting in accessing memory location outside of static array PRIMARY_DRAWING_ORDER_FIELD_BYTES
  3. CVE-2020-11089freerdp: out-of-bounds read in irp functions
  4. CVE-2020-11088freerdp: out-of-bounds read in ntlm_read_NegotiateMessage
  5. CVE-2020-11087freerdp: out-of-bounds read in ntlm_read_AuthenticateMessage
  6. CVE-2020-11086freerdp: out-of-bounds read in ntlm_read_ntlm_v2_client_challenge function
  7. CVE-2020-11085freerdp: out-of-bounds read in cliprdr_read_format_list function
  8. CVE-2020-11080nghttp2: overly large SETTINGS frames can lead to DoS
  9. CVE-2020-11078python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function
  10. CVE-2020-11058freerdp: stream out-of-bounds seek in rdp_read_font_capability_set could lead to out-of-bounds read
  11. CVE-2020-11049freerdp: out-of-bound read of client memory that is then passed on to the protocol parser
  12. CVE-2020-11048freerdp: out-of-bounds read could result in aborting the session
  13. CVE-2020-11047freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function
  14. CVE-2020-11046freerdp: out of bounds seek in update_read_synchronize function could lead out of bounds read
  15. CVE-2020-11045freerdp: out of bounds read in update_read_bitmap_data function
  16. CVE-2020-11044freerdp: double free in update_read_cache_bitmap_v3_order function
  17. CVE-2020-11043freerdp: out of bound read in rfx_process_message_tileset
  18. CVE-2020-11042freerdp: out-of-bounds read in update_read_icon_info function
  19. CVE-2020-11041freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu
  20. CVE-2020-11040freerdp: Out of bound access in clear_decompress_subcode_rlex
  21. CVE-2020-11039freerdp: Out of bound read/write in usb redirection channel
  22. CVE-2020-11038freerdp: Integer overflow in VIDEO channel
  23. CVE-2020-11023jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods
  24. CVE-2020-11022jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  25. CVE-2020-11019freerdp: Out of bound read in update_recv could result in a crash
  26. CVE-2020-11018freerdp: Out of bound read in cliprdr_server_receive_capabilities
  27. CVE-2020-11017freerdp: Double free in cliprdr_server_receive_capabilities could result in data corruption
  28. CVE-2020-11008git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak
  29. CVE-2020-10994python-pillow: multiple out-of-bounds reads via a crafted JP2 file
  30. CVE-2020-10969jackson-databind: Serialization gadgets in javax.swing.JEditorPane
  31. CVE-2020-10968jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider
  32. CVE-2020-10967dovecot: sending mail with empty quoted localpart leads to DoS
  33. CVE-2020-10958dovecot: command followed by sufficient number of newlines leads to use-after-free
  34. CVE-2020-10957dovecot: malformed NOOP commands leads to DoS
  35. CVE-2020-10942kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field
  36. CVE-2020-10933ruby: BasicSocket#read_nonblock method leads to information disclosure
  37. CVE-2020-10931memcached: mishandled memcpy into a stack-based buffer may lead to DoS
  38. CVE-2020-10878perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS
  39. CVE-2020-10781kernel: zram sysfs resource consumption
  40. CVE-2020-10774kernel: possibility of memory disclosure when reading the file /proc/sys/kernel/rh_features
  41. CVE-2020-10773kernel: kernel stack information leak on s390/s390x
  42. CVE-2020-10772unbound: incomplete fix for CVE-2020-12662 in RHEL7
  43. CVE-2020-10769kernel: Buffer over-read in crypto_authenc_extractkeys() when a payload longer than 4 bytes is not aligned.
  44. CVE-2020-10768kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.
  45. CVE-2020-10767kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.
  46. CVE-2020-10766kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection.
  47. CVE-2020-10761QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client
  48. CVE-2020-10760samba: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV
  49. CVE-2020-10759fwupd: Possible bypass in signature verification
  50. CVE-2020-10757kernel: kernel: DAX hugepages not considered during mremap
CVE 2020 document archive — Page 22 | PulseLinux