CVE 2020 document archive · 3
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,491 documents · Identifier year 2020 · 3 / 30
- CVE-2020-35512dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour
- CVE-2020-35508kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent
- CVE-2020-35507binutils: NULL pointer dereference in bfd_pef_parse_function_stubs function in bfd/pef.c
- CVE-2020-35506QEMU: use after free vulnerability in esp_do_dma() in hw/scsi/esp.c
- CVE-2020-35505QEMU: NULL pointer dereference in do_busid_cmd() in hw/scsi/esp.c
- CVE-2020-35504QEMU: NULL pointer dereference in scsi_req_continue() in hw/scsi/scsi-bus.c
- CVE-2020-35503QEMU: NULL pointer dereference issue in megasas-gen2 host bus adapter
- CVE-2020-35501kernel: audit not logging access to syscall open_by_handle_at for users with CAP_DAC_READ_SEARCH capability
- CVE-2020-35499kernel: NULL pointer dereference in sco_sock_getsockopt function
- CVE-2020-35498openvswitch: limitation in the OVS packet parsing in userspace leads to DoS
- CVE-2020-35496binutils: NULL pointer dereference in bfd_pef_scan_start_address function in bfd/pef.c
- CVE-2020-35495binutils: NULL pointer dereference in bfd_pef_parse_symbols function in bfd/pef.c
- CVE-2020-35494binutils: usage of unitialized heap in tic4x_print_cond function in opcodes/tic4x-dis.c
- CVE-2020-35493binutils: heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file
- CVE-2020-35492cairo: libreoffice slideshow aborts with stack smashing in cairo's composite_boxes
- CVE-2020-35491jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource
- CVE-2020-35490jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource
- CVE-2020-35452httpd: Single zero byte stack overflow in mod_auth_digest
- CVE-2020-35448binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c
- CVE-2020-35357gsl: Stack buffer overflow in gsl_stats_quantile_from_sorted_data
- CVE-2020-35342binutils: uninitialized heap memory in tic4x_print_cond() in opcodes/tic4x-dis.c
- CVE-2020-35131cockpit: registerCriteriaFunction in lib/MongoLite/Database.php allows for a Remote Command Execution via custom php code injection
- CVE-2020-35113Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6
- CVE-2020-35112Mozilla: Opening an extension-less download may have inadvertently launched an executable instead
- CVE-2020-35111Mozilla: The proxy.onRequest API did not catch view-source URLs
- CVE-2020-29661kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free
- CVE-2020-29660kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-after-free
- CVE-2020-29652golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference
- CVE-2020-29651python-py: ReDoS in the py.path.svnwc component via mailicious input to blame functionality
- CVE-2020-29623webkitgtk: User may be unable to fully delete browsing history
- CVE-2020-29599ImageMagick: Shell injection via PDF password could result in arbitrary code execution
- CVE-2020-29573glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern
- CVE-2020-29562glibc: assertion failure in iconv when converting invalid UCS4
- CVE-2020-29534kernel: io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimize unshare_fd() allowing for privileges escalation
- CVE-2020-29511go: encoding/xml: XML element instability
- CVE-2020-29510go: encoding/xml: XML directives instability
- CVE-2020-29509go: encoding/xml: XML attribute instability
- CVE-2020-29443QEMU: ide: atapi: OOB access while processing read commands
- CVE-2020-29385gdk-pixbuf: DoS in lzw.c
- CVE-2020-29374kernel: the get_user_pages implementation when used for a copy-on-write page does not properly consider the semantics of read operations and therefore can grant unintended read access
- CVE-2020-29373kernel: Insecure handling of root directory for path lookups via io_uring
- CVE-2020-29372kernel: IORING_OP_MADVISE races with coredumping
- CVE-2020-29371kernel: crafted romfs filesystem leaks uninitialized memory to userspace
- CVE-2020-29370kernel: Race condition in SLUB bulk alloc slowpath
- CVE-2020-29369kernel: race condition between expand_downwards and expand_upwards and page-table free operations from an munmap call
- CVE-2020-29368kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check
- CVE-2020-29363p11-kit: out-of-bounds write in p11_rpc_buffer_get_byte_array_value function in rpc-message.c
- CVE-2020-29362p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c
- CVE-2020-29361p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers
- CVE-2020-29260libvncserver: a memory leak via the function rfbClientCleanup() may lead to a DoS