PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2020 document archive · 8

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,491 documents · Identifier year 2020 · 8 / 30

  1. CVE-2020-25678ceph: mgr modules' passwords are in clear text in mgr logs
  2. CVE-2020-25676ImageMagick: outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c and MagickCore/cache.c
  3. CVE-2020-25675ImageMagick: outside the range of representable values of type 'long' and integer overflow at MagickCore/transform.c and MagickCore/image.c
  4. CVE-2020-25674ImageMagick: heap-based buffer overflow in WriteOnePNGImage in coders/png.c
  5. CVE-2020-25673kernel: non-blocking socket in llcp_sock_connect()
  6. CVE-2020-25672kernel: memory leak in llcp_sock_connect()
  7. CVE-2020-25671kernel: refcount leak in llcp_sock_connect()
  8. CVE-2020-25670kernel: refcount leak in llcp_sock_bind()
  9. CVE-2020-25669kernel: use-after-free read in sunkbd_reinit in drivers/input/keyboard/sunkbd.c
  10. CVE-2020-25668kernel: race condition in fg_console can lead to use-after-free in con_font_op
  11. CVE-2020-25667ImageMagick: heap-based buffer overflow in TIFFGetProfiles in coders/tiff.c
  12. CVE-2020-25666ImageMagick: outside the range of representable values of type int and signed integer overflow in MagickCore/histogram.c
  13. CVE-2020-25665ImageMagick: heap-based buffer overflow in WritePALMImage in coders/palm.c
  14. CVE-2020-25664ImageMagick: heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  15. CVE-2020-25663ImageMagick: use-after-free, heap-buffer-overflow triggered by GetPixelRed, GetPixelBlue in MagickCore/pixel-accessor.h
  16. CVE-2020-25662kernel: Red Hat only CVE-2020-12352 regression
  17. CVE-2020-25661kernel: Red Hat only CVE-2020-12351 regression
  18. CVE-2020-25660ceph: CEPHX_V2 replay attack protection lost
  19. CVE-2020-25659python-cryptography: Bleichenbacher timing oracle attack against RSA decryption
  20. CVE-2020-25658python-rsa: bleichenbacher timing oracle attack against RSA decryption
  21. CVE-2020-25657m2crypto: bleichenbacher timing attacks in the RSA decryption API
  22. CVE-2020-25656kernel: use-after-free in read in vt_do_kdgkb_ioctl
  23. CVE-2020-25654pacemaker: ACL restrictions bypass
  24. CVE-2020-25653spice-vdagent: UNIX domain socket peer PID retrieved via SO_PEERCRED is subject to race condition
  25. CVE-2020-25652spice-vdagent: possibility to exhaust file descriptors in vdagentd
  26. CVE-2020-25651spice-vdagent: possible file transfer DoS and information leak via active_xfers hash map
  27. CVE-2020-25650spice-vdagent: memory DoS via arbitrary entries in active_xfers hash table
  28. CVE-2020-25649jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)
  29. CVE-2020-25648nss: TLS 1.3 CCS flood remote DoS Attack
  30. CVE-2020-25647grub2: Out-of-bounds write in grub_usb_device_initialize()
  31. CVE-2020-25645kernel: Geneve/IPsec traffic may be unencrypted between two Geneve endpoints
  32. CVE-2020-25643kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow
  33. CVE-2020-25641kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS
  34. CVE-2020-25639kernel: NULL pointer dereference via nouveau ioctl can lead to DoS
  35. CVE-2020-25637libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c
  36. CVE-2020-25633resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling
  37. CVE-2020-25632grub2: Use-after-free in rmmod command
  38. CVE-2020-25625QEMU: usb: hcd-ohci: infinite loop issue while processing transfer descriptors
  39. CVE-2020-25624QEMU: usb: hcd-ohci: out-of-bound access issue while processing transfer descriptors
  40. CVE-2020-25613ruby: Potential HTTP request smuggling in WEBrick
  41. CVE-2020-25559gnuplot: double free when executing print_set_output may lead to arbitrary code execution
  42. CVE-2020-25412gnuplot: out-of-bounds-write from strncpy() may lead to arbitrary code execution
  43. CVE-2020-25285kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c
  44. CVE-2020-25284kernel: incomplete permission checking for access to rbd devices
  45. CVE-2020-25275dovecot: Denial of service via mail MIME parsing
  46. CVE-2020-25221kernel: incorrect vsyscall page reference counting in get_gate_page function in mm/gup.c
  47. CVE-2020-25220kernel: use-after-free because skcd->no_refcnt was not considered during the backport of CVE-2020-14356
  48. CVE-2020-25219libproxy: uncontrolled recursion via an infinite stream response leading to stack exhaustion
  49. CVE-2020-25212kernel: TOCTOU mismatch in the NFS client code
  50. CVE-2020-25211kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c
CVE 2020 document archive — Page 8 | PulseLinux