CVE 2020 document archive · 25
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,491 documents · Identifier year 2020 · 25 / 30
- CVE-2020-8649kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c
- CVE-2020-8648kernel: use-after-free in n_tty_receive_buf_common function in drivers/tty/n_tty.c
- CVE-2020-8647kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c
- CVE-2020-8632cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py
- CVE-2020-8631cloud-init: Use of random.choice when generating random password
- CVE-2020-8625bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation
- CVE-2020-8624bind: incorrect enforcement of update-policy rules of type "subdomain"
- CVE-2020-8623bind: remotely triggerable assertion failure in pk11.c
- CVE-2020-8622bind: truncated TSIG response can lead to an assertion failure
- CVE-2020-8621bind: Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c
- CVE-2020-8620bind: A specially crafted large TCP payload can trigger an assertion failure in tcpdns.c
- CVE-2020-8619bind: asterisk character in an empty non-terminal can cause an assertion failure in rbtdb.c
- CVE-2020-8618bind: A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer
- CVE-2020-8617bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c
- CVE-2020-8616bind: BIND does not sufficiently limit the number of fetches performed when processing referrals
- CVE-2020-8608QEMU: Slirp: potential OOB access due to unsafe snprintf() usages
- CVE-2020-8597ppp: Buffer overflow in the eap_request and eap_response functions in eap.c
- CVE-2020-8517squid: Buffer Overflow in ext_lm_group_acl helper
- CVE-2020-8492python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS
- CVE-2020-8450squid: Buffer overflow in reverse-proxy configurations
- CVE-2020-8449squid: Improper input validation issues in HTTP Request processing
- CVE-2020-8428kernel: use-after-free in fs/namei.c
- CVE-2020-8315python: unsafe dll loading in getpathp.c on Windows
- CVE-2020-8287nodejs: HTTP request smuggling via two copies of a header field in an http request
- CVE-2020-8286curl: Inferior OCSP verification
- CVE-2020-8285curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used
- CVE-2020-8284curl: FTP PASV command response can cause curl to connect to arbitrary host
- CVE-2020-8277c-ares: ares_parse_{a,aaaa}_reply() insufficient naddrttls validation DoS
- CVE-2020-8265nodejs: use-after-free in the TLS implementation
- CVE-2020-8252libuv: buffer overflow in realpath
- CVE-2020-8251nodejs: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests
- CVE-2020-8231curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set
- CVE-2020-8201nodejs: HTTP request smuggling due to CR-to-Hyphen conversion
- CVE-2020-8184rubygem-rack: percent-encoded cookies can be used to overwrite existing prefixed cookie names
- CVE-2020-8177curl: Incorrect argument check can allow remote servers to overwrite local files
- CVE-2020-8174nodejs: memory corruption in napi_get_value_string_* functions
- CVE-2020-8172nodejs: TLS session reuse can lead to hostname verification bypass
- CVE-2020-8169libcurl: partial password leak over DNS on HTTP redirect
- CVE-2020-8116nodejs-dot-prop: prototype pollution
- CVE-2020-8112openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c
- CVE-2020-8037tcpdump: ppp decapsulator can be convinced to allocate a large amount of memory
- CVE-2020-8036tcpdump: the tok2strbuf function was used by the SOME/IP dissector in an unsafe way
- CVE-2020-8025pcp: Insecure permission of /var/lib/pcp/tmp/ directories on SUSE
- CVE-2020-8022tomcat: /usr/lib/tmpfiles.d/tomcat.conf is group-writable
- CVE-2020-7957dovecot: specially crafted email can cause mailbox to have permanently unaccessible mail
- CVE-2020-7919golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service
- CVE-2020-7788nodejs-ini: Prototype pollution via malicious INI file
- CVE-2020-7774nodejs-y18n: prototype pollution vulnerability
- CVE-2020-7754nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS
- CVE-2020-7656jquery: Cross-site scripting (XSS) via