PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 7

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 7 / 30

  1. CVE-2020-26154libproxy: sending more than 102400 bytes in PAC without a Content-Length present could result in buffer overflow
  2. CVE-2020-26147kernel: reassembling mixed encrypted/plaintext fragments
  3. CVE-2020-26146kernel: reassembling encrypted fragments with non-consecutive packet numbers
  4. CVE-2020-26145kernel: accepting plaintext broadcast fragments as full frames
  5. CVE-2020-26144kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header
  6. CVE-2020-26143kernel: accepting fragmented plaintext frames in protected networks
  7. CVE-2020-26142kernel: processing fragmented frames as full frames
  8. CVE-2020-26141kernel: not verifying TKIP MIC of fragmented frames
  9. CVE-2020-26140kernel: accepting plaintext data frames in protected networks
  10. CVE-2020-26139kernel: Forwarding EAPOL from unauthenticated wifi client
  11. CVE-2020-26137python-urllib3: CRLF injection via HTTP request method
  12. CVE-2020-26117tigervnc: certificate exceptions stored as authorities
  13. CVE-2020-26116python: CRLF injection via HTTP request method in httplib/http.client
  14. CVE-2020-26088kernel: missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c allows local attackers to create raw sockets
  15. CVE-2020-25969gnuplot: buffer overflow via the function plotrequest()
  16. CVE-2020-25866wireshark: BLIP dissector crash (wnpa-sec-2020-13)
  17. CVE-2020-25863wireshark: MIME multipart dissector crash (wnpa-sec-2020-11)
  18. CVE-2020-25862wireshark: TCP dissector crash (wnpa-sec-2020-12)
  19. CVE-2020-25743QEMU: ide: null pointer dereference while cancelling i/o operation
  20. CVE-2020-25742QEMU: scsi: lsi: null pointer dereference during memory move
  21. CVE-2020-25741QEMU: fdc: null pointer dereference during r/w data transfer
  22. CVE-2020-25723QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c
  23. CVE-2020-25722samba: Samba AD DC did not do sufficient access and conformance checking of data stored
  24. CVE-2020-25721samba: Kerberos acceptors need easy access to stableAD identifiers (eg objectSid)
  25. CVE-2020-25720samba: check attribute access rights for LDAP adds of computers
  26. CVE-2020-25719samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  27. CVE-2020-25718samba: Samba AD DC did not correctly sandbox Kerberos tickets issues by an RODC
  28. CVE-2020-25717samba: Active Directory (AD) domain user could become root on domain members
  29. CVE-2020-25715pki-core: XSS in the certificate search results
  30. CVE-2020-25713raptor2: malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common
  31. CVE-2020-25712xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege escalation vulnerability
  32. CVE-2020-25710openldap: assertion failure in CSN normalization with invalid input
  33. CVE-2020-25709openldap: assertion failure in Certificate List syntax validation
  34. CVE-2020-25708libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS
  35. CVE-2020-25707QEMU: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c
  36. CVE-2020-25705kernel: ICMP rate limiting can be used for DNS poisoning attack
  37. CVE-2020-25704kernel: perf_event_parse_addr_filter memory
  38. CVE-2020-25697xorg-x11-server: local privilege escalation
  39. CVE-2020-25696postgresql: psql's \gset allows overwriting specially treated variables
  40. CVE-2020-25695postgresql: Multiple features escape "security restricted operation" sandbox
  41. CVE-2020-25694postgresql: Reconnection can downgrade connection security settings
  42. CVE-2020-25692openldap: NULL pointer dereference for unauthenticated packet in slapd
  43. CVE-2020-25690fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport
  44. CVE-2020-25687dnsmasq: heap-based buffer overflow with large memcpy in sort_rrset() when DNSSEC is enabled
  45. CVE-2020-25686dnsmasq: multiple queries forwarded for the same name makes forging replies easier for an off-path attacker
  46. CVE-2020-25685dnsmasq: loose query name check in reply_query() makes forging replies easier for an off-path attacker
  47. CVE-2020-25684dnsmasq: loose address/port check in reply_query() makes forging replies easier for an off-path attacker
  48. CVE-2020-25683dnsmasq: heap-based buffer overflow with large memcpy in get_rdata() when DNSSEC is enabled
  49. CVE-2020-25682dnsmasq: buffer overflow in extract_name() due to missing length check when DNSSEC is enabled
  50. CVE-2020-25681dnsmasq: heap-based buffer overflow in sort_rrset() when DNSSEC is enabled
CVE 2020 document archive — Page 7 | PulseLinux