PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 29

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 29 / 30

  1. CVE-2020-2659OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)
  2. CVE-2020-2655OpenJDK: Incorrect handling of unexpected CertificateVerify TLS handshake messages (JSSE, 8231780)
  3. CVE-2020-2654OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)
  4. CVE-2020-2627mysql: Server: Parser unspecified vulnerability (CPU Jan 2020)
  5. CVE-2020-2604OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)
  6. CVE-2020-2601OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)
  7. CVE-2020-2593OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)
  8. CVE-2020-2590OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)
  9. CVE-2020-2589mysql: InnoDB unspecified vulnerability (CPU Jan 2020)
  10. CVE-2020-2588mysql: Server: DML unspecified vulnerability (CPU Jan 2020)
  11. CVE-2020-2585JDK: unspecified vulnerability fixed in 8u221 (JavaFX)
  12. CVE-2020-2584mysql: Server: Options unspecified vulnerability (CPU Jan 2020)
  13. CVE-2020-2583OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)
  14. CVE-2020-2580mysql: Server: DDL unspecified vulnerability (CPU Jan 2020)
  15. CVE-2020-2579mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)
  16. CVE-2020-2577mysql: InnoDB unspecified vulnerability (CPU Jan 2020)
  17. CVE-2020-2574mysql: C API unspecified vulnerability (CPU Jan 2020)
  18. CVE-2020-2573mysql: C API unspecified vulnerability (CPU Jan 2020)
  19. CVE-2020-2572mysql: Server: Audit Plugin unspecified vulnerability (CPU Jan 2020)
  20. CVE-2020-2570mysql: C API unspecified vulnerability (CPU Jan 2020)
  21. CVE-2020-1983QEMU: slirp: use-after-free in ip_reass() function in ip_input.c
  22. CVE-2020-1971openssl: EDIPARTYNAME NULL pointer de-reference
  23. CVE-2020-1968openssl: Information exposure when DH secret are reused across multiple TLS connections
  24. CVE-2020-1967openssl: Segmentation fault in SSL_check_chain causes denial of service
  25. CVE-2020-1953apache-commons-configuration: uncontrolled class instantiation when loading YAML files
  26. CVE-2020-1946spamassassin: Malicious rule configuration files can be configured to run system commands
  27. CVE-2020-1945ant: insecure temporary file vulnerability
  28. CVE-2020-1938tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
  29. CVE-2020-1935tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling
  30. CVE-2020-1934httpd: mod_proxy_ftp use of uninitialized value
  31. CVE-2020-1931spamassassin: command injection via crafted configuration file
  32. CVE-2020-1930spamassassin: command injection via crafted configuration file
  33. CVE-2020-1927httpd: mod_rewrite configurations vulnerable to open redirect
  34. CVE-2020-1763libreswan: DoS attack via malicious IKEv1 informational exchange message
  35. CVE-2020-1760ceph: header-splitting in RGW GetObject has a possible XSS
  36. CVE-2020-1759ceph: secure mode of msgr2 breaks both confidentiality and integrity aspects for long-lived sessions
  37. CVE-2020-1752glibc: use-after-free in glob() function when expanding ~user
  38. CVE-2020-1751glibc: array overflow in backtrace functions for powerpc
  39. CVE-2020-1749kernel: some ipv6 protocols not encrypted over ipsec tunnel
  40. CVE-2020-1747PyYAML: arbitrary command execution through python/object/new when FullLoader is used
  41. CVE-2020-1730libssh: denial of service when handling AES-CTR (or DES) ciphers
  42. CVE-2020-1726podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created
  43. CVE-2020-1722ipa: No password length restriction leads to denial of service
  44. CVE-2020-1721pki-core: KRA vulnerable to reflected XSS via the getPk12 page
  45. CVE-2020-1720postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks
  46. CVE-2020-1712systemd: use-after-free when asynchronous polkit queries are performed
  47. CVE-2020-1711QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server
  48. CVE-2020-1702containers/image: Container images read entire image manifest into memory
  49. CVE-2020-1700ceph: connection leak in the RGW Beast front-end permits a DoS against the RGW server
  50. CVE-2020-1699ceph: improper URL checking leads to information disclosure
CVE 2020 document archive — Page 29 | PulseLinux