CVE 2020 document archive · 23
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,491 documents · Identifier year 2020 · 23 / 30
- CVE-2020-10756QEMU: slirp: networking out-of-bounds read information disclosure vulnerability
- CVE-2020-10754NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults
- CVE-2020-10753ceph: radosgw: HTTP header injection via CORS ExposeHeader tag
- CVE-2020-10751kernel: SELinux netlink permission check bypass
- CVE-2020-10749containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters
- CVE-2020-10745samba: Parsing and packing of NBT and DNS packets can consume excessive CPU
- CVE-2020-10742kernel: NFS client crash due to index buffer overflow during Direct IO write causing kernel panic
- CVE-2020-10737oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack
- CVE-2020-10736ceph: authorization bypass in monitor and manager daemons
- CVE-2020-10735python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS
- CVE-2020-10732kernel: uninitialized kernel data leak in userspace coredumps
- CVE-2020-10730samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results
- CVE-2020-10726dpdk: librte_vhost VHOST_USER_GET_INFLIGHT_FD message flooding to result in a DoS
- CVE-2020-10725dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor
- CVE-2020-10724dpdk: librte_vhost Missing inputs validation in Vhost-crypto
- CVE-2020-10723dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()
- CVE-2020-10722dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()
- CVE-2020-10720kernel: use-after-free read in napi_gro_frags() in the Linux kernel
- CVE-2020-10717QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS
- CVE-2020-10713grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process
- CVE-2020-10711Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic
- CVE-2020-10704samba: LDAP Denial of Service (stack overflow) in Samba AD DC
- CVE-2020-10703libvirt: Potential denial of service via active pool without target path
- CVE-2020-10702qemu: weak signature generation in Pointer Authentication support for ARM
- CVE-2020-10701libvirt: guest agent timeout can be set under read-only mode leading to DoS
- CVE-2020-10700samba: Use-after-free in Samba AD DC LDAP Server with ASQ
- CVE-2020-10699targetcli: world writable /var/run/targetclid.sock allows unprivileged user to execute commands
- CVE-2020-10696buildah: Crafted input tar file may lead to local file overwrite during image build process
- CVE-2020-10690kernel: use-after-free in cdev_put() when a PTP device is removed while it's chardev is open
- CVE-2020-10683dom4j: XML External Entity vulnerability in default SAX parser
- CVE-2020-10673jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
- CVE-2020-10672jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
- CVE-2020-10663rubygem-json: Unsafe object creation vulnerability in JSON
- CVE-2020-10595pam_krb5: incorrect input handling results in single byte buffer overflow which may lead to heap corruption
- CVE-2020-10543perl: heap-based buffer overflow in regular expression compiler leads to DoS
- CVE-2020-10531ICU: Integer overflow in UnicodeString::doAppend()
- CVE-2020-10379python-pillow: two buffer overflows in libImaging/TiffDecode.c due to small buffers allocated in ImagingLibTiffDecode()
- CVE-2020-10378python-pillow: an out-of-bounds read in libImaging/PcxDecode.c can occur when reading PCX files
- CVE-2020-10370Bluez: bluetooth firmware has Sweyntooth and Spectra issues
- CVE-2020-10255hw: dram: circumvent TRR to induce bit flips via Rowhammer
- CVE-2020-10251ImageMagick: out-of-bounds read in ReadHEICImageByID function in coders/heic.c
- CVE-2020-10188telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code
- CVE-2020-10177python-pillow: multiple out-of-bounds reads in libImaging/FliDecode.c
- CVE-2020-10136kernel: IP-in-IP protocol routes arbitrary traffic by default
- CVE-2020-10135kernel: bluetooth: BR/EDR Bluetooth Impersonation Attacks (BIAS)
- CVE-2020-10134bluetooth: Method Confusion Pairing Vulnerability in LE Secure Connections and BR/EDR Secure Simple Pairing
- CVE-2020-10109python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header
- CVE-2020-10108python-twisted: HTTP request smuggling when presented with two Content-Length headers
- CVE-2020-10029glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions
- CVE-2020-10018webkitgtk: Use-after-free issue in accessibility/AXObjectCache.cpp