PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 24

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 24 / 30

  1. CVE-2020-10001cups: access to uninitialized buffer in ipp.c
  2. CVE-2020-9983webkitgtk: out-of-bounds write may lead to code execution
  3. CVE-2020-9952webkitgtk: input validation issue may lead to a cross site scripting
  4. CVE-2020-9951webkitgtk: use-after-free may lead to arbitrary code execution
  5. CVE-2020-9948webkitgtk: type confusion may lead to arbitrary code execution
  6. CVE-2020-9947webkitgtk: use after free issue may lead to arbitrary code execution
  7. CVE-2020-9925webkitgtk: A logic issue may lead to cross site scripting
  8. CVE-2020-9915webkitgtk: Access issue in content security policy
  9. CVE-2020-9895webkitgtk: Use-after-free may lead to application termination or arbitrary code execution
  10. CVE-2020-9894webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution
  11. CVE-2020-9893webkitgtk: Use-after-free may lead to application termination or arbitrary code execution
  12. CVE-2020-9862webkitgtk: Command injection in web inspector
  13. CVE-2020-9850webkitgtk: Logic issue may lead to arbitrary code execution
  14. CVE-2020-9843webkitgtk: Input validation issue may lead to cross site scripting
  15. CVE-2020-9807webkitgtk: Memory corruption may lead to arbitrary code execution
  16. CVE-2020-9806webkitgtk: Memory corruption may lead to arbitrary code execution
  17. CVE-2020-9805webkitgtk: Logic issue may lead to cross site scripting
  18. CVE-2020-9803webkitgtk: Memory corruption may lead to arbitrary code execution
  19. CVE-2020-9802webkitgtk: Logic issue may lead to arbitrary code execution
  20. CVE-2020-9770bluez: BLESA bluetooth attack
  21. CVE-2020-9548jackson-databind: Serialization gadgets in anteros-core
  22. CVE-2020-9547jackson-databind: Serialization gadgets in ibatis-sqlmap
  23. CVE-2020-9546jackson-databind: Serialization gadgets in shaded-hikari-config
  24. CVE-2020-9490httpd: Push diary crash on specifically crafted HTTP/2 header
  25. CVE-2020-9488log4j: improper validation of certificate with host mismatch in SMTP appender
  26. CVE-2020-9484tomcat: deserialization flaw in session persistence storage leading to RCE
  27. CVE-2020-9431wireshark: LTE RRC dissector memory leak could result in excessive memory resource consumption
  28. CVE-2020-9430wireshark: injecting a malformed packet may cause WiMax DLMAP dissector to crash due to out-of-bound read
  29. CVE-2020-9429wireshark: WireGuard dissector could crash due to NULL pointer dereference
  30. CVE-2020-9428wireshark: injecting a malformed packet may cause the EAP dissector to crash due to out-of-bounds read
  31. CVE-2020-9391kernel: brk discards top byte of addresses on aarch64 causing heap corruption in glibc malloc
  32. CVE-2020-9383kernel: out-of-bounds read in set_fdc in drivers/block/floppy.c
  33. CVE-2020-9366screen: Out of bounds access when setting w_xtermosc after OSC 49
  34. CVE-2020-9359okular: local binary execution via specially crafted PDF files
  35. CVE-2020-9327sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations
  36. CVE-2020-9308libarchive: attempts to unpack a RAR5 file with an invalid or corrupted header leads to a SIGSEGV
  37. CVE-2020-9283golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic
  38. CVE-2020-8992kernel: soft lockup via a crafted journal size in ext4_protect_reserved_inode in fs/ext4/block_validity.c
  39. CVE-2020-8991lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c
  40. CVE-2020-8945proglottis/gpgme: Use-after-free in GPGME bindings during container image pull
  41. CVE-2020-8927brotli: buffer overflow when input chunk is larger than 2GiB
  42. CVE-2020-8908guava: local information disclosure via temporary directory created with unsafe permissions
  43. CVE-2020-8840jackson-databind: Lacks certain xbean-reflect/JNDI blocking
  44. CVE-2020-8835kernel: out-of-bounds read/write in the bpf verifier
  45. CVE-2020-8834Kernel: ppc: kvm: conflicting use of HSTATE_HOST_R1 to store r1 state leads to host stack corruption
  46. CVE-2020-8832kernel: incomplete fix for CVE-2019-14615 allows for a local information exposure
  47. CVE-2020-8698hw: Fast forward store predictor
  48. CVE-2020-8696hw: Vector Register Leakage-Active
  49. CVE-2020-8695hw: Information disclosure issue in Intel SGX via RAPL interface
  50. CVE-2020-8694kernel: Insufficient access control vulnerability in PowerCap Framework
CVE 2020 document archive — Page 24 | PulseLinux