PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 4

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 4 / 30

  1. CVE-2020-29130QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets
  2. CVE-2020-29129QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets
  3. CVE-2020-28974kernel: slab-out-of-bounds read in fbcon
  4. CVE-2020-28949Archive_Tar: improper filename sanitization leads to file overwrites
  5. CVE-2020-28948Archive_Tar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked
  6. CVE-2020-28941kernel: NULL pointer dereference in spk_ttyio_ldisc_close function in drivers/accessibility/speakup/spk_ttyio.c
  7. CVE-2020-28935unbound: symbolic link traversal when writing PID file
  8. CVE-2020-28916QEMU: e1000e: infinite loop scenario in case of null packet descriptor
  9. CVE-2020-28915kernel: out-of-bounds read in fbcon_get_font function
  10. CVE-2020-28912mariadb: Named pipe permission issue on Windows
  11. CVE-2020-28896mutt: Incorrect handling of invalid initial IMAP responses could lead to an authentication attempt over unencrypted connection
  12. CVE-2020-28852golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag
  13. CVE-2020-28851golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension
  14. CVE-2020-28724python-werkzeug: open redirect via double slash in the URL
  15. CVE-2020-28588kernel: information leak in the syscall implementation on 32-bit systems
  16. CVE-2020-28493python-jinja2: ReDoS vulnerability in the urlize filter
  17. CVE-2020-28476python-tornado: Web Cache Poisoning by using a vector called parameter cloaking may lead to Integrity and Availability compromise
  18. CVE-2020-28469nodejs-glob-parent: Regular expression denial of service
  19. CVE-2020-28463python-reportlab: Server-side request forgery via img tags
  20. CVE-2020-28407swtpm: symlink issue may lead to privilege escalation
  21. CVE-2020-28374kernel: SCSI target (LIO) write to any block on ILO backstore
  22. CVE-2020-28367golang: improper validation of cgo flags can lead to code execution at build time
  23. CVE-2020-28366golang: malicious symbol names can lead to code execution at build time
  24. CVE-2020-28362golang: math/big: panic during recursive division of very large numbers
  25. CVE-2020-28241libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c
  26. CVE-2020-28200dovecot: insufficient protection against excessive resource usage allows for a DoS
  27. CVE-2020-28196krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS
  28. CVE-2020-28163libdwarf: NULL pointer dereference due to corrupt line table header
  29. CVE-2020-28097kernel: out-of-bounds read/write in vgacon_scrolldelta function
  30. CVE-2020-28030wireshark: malformed packet on wire could make GQUIC protocol dissector loop
  31. CVE-2020-27918webkitgtk: Use-after-free leading to arbitrary code execution
  32. CVE-2020-27846crewjam/saml: authentication bypass in saml authentication
  33. CVE-2020-27845openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c
  34. CVE-2020-27844openjpeg: heap-based buffer overflow in opj_t2_encode_packet function in openjp2/t2.c
  35. CVE-2020-27843openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c
  36. CVE-2020-27842openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c
  37. CVE-2020-27841openjpeg: heap-based buffer overflows in lib/openjp2/pi.c
  38. CVE-2020-27840samba: Heap corruption via crafted DN strings
  39. CVE-2020-27839ceph-dashboard: Don't use Browser's LocalStorage for storing JWT but Secure Cookies with proper HTTP Headers
  40. CVE-2020-27837gdm: lock screen bypass when autologin is set
  41. CVE-2020-27835kernel: child process is able to access parent mm through hfi dev file handle
  42. CVE-2020-27830kernel: null pointer dereference in in spk_ttyio_receive_buf2
  43. CVE-2020-27829ImageMagick: heap buffer overflow in coders/tiff.c
  44. CVE-2020-27828jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c
  45. CVE-2020-27827lldp/openvswitch: denial of service via externally triggered memory leak
  46. CVE-2020-27825kernel: use-after-free in the ftrace ring buffer resizing logic due to a race condition
  47. CVE-2020-27824openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes()
  48. CVE-2020-27823openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode()
  49. CVE-2020-27821QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c
  50. CVE-2020-27820kernel: use-after-free in nouveau kernel module
CVE 2020 document archive — Page 4 | PulseLinux