PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 6

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 6 / 30

  1. CVE-2020-27347tmux: stack buffer overflow in input_csi_dispatch_sgr_colon
  2. CVE-2020-27225eclipse: Help Subsystem does not authenticate active help requests
  3. CVE-2020-27223jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS
  4. CVE-2020-27221JDK: Stack-based buffer overflow when converting from UTF-8 characters to platform encoding
  5. CVE-2020-27218jetty: buffer not correctly recycled in Gzip Request inflation
  6. CVE-2020-27216jetty: local temporary directory hijacking vulnerability
  7. CVE-2020-27194kernel: bounds tracking issue during use of 64-bit values in scalar32_min_max_or function in kernel/bpf/verifier.c
  8. CVE-2020-27171kernel: Integer underflow when restricting speculative pointer arithmetic
  9. CVE-2020-27170kernel: Speculation on pointer arithmetic against bpf_context pointer
  10. CVE-2020-27153bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE
  11. CVE-2020-27152Kernel: KVM: host stack overflow due to lazy update IOAPIC
  12. CVE-2020-27067kernel: use after free due to a race condition may lead to local escalation of privilege
  13. CVE-2020-27066kernel: use after free in xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c leads to local escalation of privilege
  14. CVE-2020-26978Mozilla: Internal network hosts could have been probed by a malicious webpage
  15. CVE-2020-26976Mozilla: HTTPS pages could have been intercepted by a registered service worker when they should not have been
  16. CVE-2020-26974Mozilla: Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free
  17. CVE-2020-26973Mozilla: CSS Sanitizer performed incorrect sanitization
  18. CVE-2020-26971Mozilla: Heap buffer overflow in WebGL
  19. CVE-2020-26970Mozilla: Stack overflow due to incorrect parsing of SMTP server response codes
  20. CVE-2020-26968Mozilla: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5
  21. CVE-2020-26966Mozilla: Single-word search queries were also broadcast to local network
  22. CVE-2020-26965Mozilla: Software keyboards may have remembered typed passwords
  23. CVE-2020-26961Mozilla: DoH did not filter IPv4 mapped IP Addresses
  24. CVE-2020-26960Mozilla: Potential use-after-free in uses of nsTArray
  25. CVE-2020-26959Mozilla: Use-after-free in WebRequestService
  26. CVE-2020-26958Mozilla: Requests intercepted through ServiceWorkers lacked MIME type restrictions
  27. CVE-2020-26956Mozilla: XSS through paste (manual and clipboard API)
  28. CVE-2020-26953Mozilla: Fullscreen could be enabled without displaying the security UI
  29. CVE-2020-26951Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
  30. CVE-2020-26950Mozilla: Write side effects in MCallGetProperty opcode not accounted for
  31. CVE-2020-26575wireshark: FBZERO dissector could enter an infinite loop
  32. CVE-2020-26572opensc: stack-based buffer overflow in tcos_decipher
  33. CVE-2020-26571opensc: stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init
  34. CVE-2020-26570opensc: heap-based buffer overflow in sc_oberthur_read_file
  35. CVE-2020-26560kernel: impersonation attack in Bluetooth Mesh Provisioning
  36. CVE-2020-26559kernel: Authvalue leak in Bluetooth Mesh Provisioning
  37. CVE-2020-26558bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack
  38. CVE-2020-26557kernel: predictable Authvalue in Bluetooth Mesh Provisioning Leads to MITM
  39. CVE-2020-26556kernel: malleable commitment Bluetooth Mesh Provisioning
  40. CVE-2020-26555kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack
  41. CVE-2020-26541kernel: security bypass in certs/blacklist.c and certs/system_keyring.c
  42. CVE-2020-26422wireshark: QUIC dissector crash (wnpa-sec-2020-20)
  43. CVE-2020-26421wireshark: USB HID dissector crash (wnpa-sec-2020-17)
  44. CVE-2020-26420wireshark: RTPS dissector memory leak (wnpa-sec-2020-18)
  45. CVE-2020-26419wireshark: multiple dissector memory leaks (wnpa-sec-2020-19)
  46. CVE-2020-26418wireshark: Kafka dissector memory leak (wnpa-sec-2020-16)
  47. CVE-2020-26259XStream: arbitrary file deletion on the local host when unmarshalling
  48. CVE-2020-26258XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling
  49. CVE-2020-26217XStream: remote code execution due to insecure XML deserialization when relying on blocklists
  50. CVE-2020-26159oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS