CVE 2020 document archive · 9
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,491 documents · Identifier year 2020 · 9 / 30
- CVE-2020-25125gnupg: AEAD preference list overflow
- CVE-2020-25097squid: improper input validation may allow a trusted client to perform HTTP request smuggling
- CVE-2020-25085QEMU: sdhci: out-of-bounds access issue while doing multi block SDMA
- CVE-2020-25084QEMU: usb: use-after-free issue while setting up packet
- CVE-2020-24980bison: Assertion failure in src/parse-gram.c could result in DoS
- CVE-2020-24979bison: Buffer overflow in src/symtab.c via crafted input file redefining the EOF token can lead to DoS
- CVE-2020-24978nasm: double-free vulnerability in pp_tokline asm/preproc.c
- CVE-2020-24977libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c
- CVE-2020-24890libraw: null pointer dereference in parse_tiff_ifd in src/metadata/tiff.cpp
- CVE-2020-24889libraw: buffer overflow vulnerability in LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution
- CVE-2020-24870LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp
- CVE-2020-24750jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration
- CVE-2020-24742qt: QPluginLoader loads plugins relative to CWD which could result in arbitrary code execution
- CVE-2020-24741qt: QLibrary loads libraries relative to CWD which could result in arbitrary code execution
- CVE-2020-24736sqlite: Crash due to misuse of window functions.
- CVE-2020-24659gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent
- CVE-2020-24654ark: crafted TAR archive with symlinks can install files outside the extraction directory
- CVE-2020-24616jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource
- CVE-2020-24606squid: Improper input validation could result in a DoS
- CVE-2020-24588kernel: wifi frame payload being parsed incorrectly as an L2 frame
- CVE-2020-24587kernel: Reassembling fragments encrypted under different keys
- CVE-2020-24586kernel: Fragmentation cache not cleared on reconnection
- CVE-2020-24553golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS
- CVE-2020-24513hw: information disclosure on some Intel Atom processors
- CVE-2020-24512hw: observable timing discrepancy in some Intel Processors
- CVE-2020-24511hw: improper isolation of shared resources in some Intel Processors
- CVE-2020-24504kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers
- CVE-2020-24503kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers
- CVE-2020-24502kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers
- CVE-2020-24490kernel: net: bluetooth: heap buffer overflow when processing extended advertising report events
- CVE-2020-24489hw: vt-d related privilege escalation
- CVE-2020-24455tpm2-tss: FAPI PolicyPCR not instatiating correctly
- CVE-2020-24394kernel: umask not applied on filesystem without ACL support
- CVE-2020-24386dovecot: IMAP hibernation function allows mail access
- CVE-2020-24371lua: mishandles the interaction between barriers and the sweep phase leading to a memory access violation involving collectgarbage
- CVE-2020-24370lua: segmentation fault in getlocal and setlocal functions in ldebug.c
- CVE-2020-24369lua: NULL pointer dereference when trying to access debug information via the line hook of a stripped function
- CVE-2020-24352QEMU: out-of-bounds read/write in ati-vga device emulation in ati_2d_blt()
- CVE-2020-24342lua: buffer overflow in luaO_pushvfstring
- CVE-2020-24332trousers: tss user can be used to create or corrupt existing files, this could lead to DoS
- CVE-2020-24331trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root
- CVE-2020-24330trousers: fails to drop the root gid privilege when no longer needed
- CVE-2020-24303grafana: XSS via a query alias for the Elasticsearch and Testdata datasource
- CVE-2020-24242nasm: segmentation fault in tok_text function in asm/preproc.c by accessing read memory
- CVE-2020-24241nasm: use-after-free in saa_wbytes function in nasmlib/saa.c
- CVE-2020-24240bison: use-after-free via crafted input file containing a NULL byte can lead to DoS
- CVE-2020-24165QEMU: use-after-free in TCG accelerator can lead to local privilege escalation
- CVE-2020-23922giflib: out-of-bounds read in DumpScreen2RGB() in gif2rgb.c in gif2rgb tool
- CVE-2020-23904speex: stack-based buffer overflow in speexenc.c via a crafted WAV file
- CVE-2020-23903speex: divide by zero in read_samples() via crafted WAV file