Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,218

Export CSV
CVE-2020-11933

local snapd exploit through cloud-init

cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. Fixed in snapd version 2.45.2, revision 8539 and core version 2.45.2, revision 9659.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Canonical
Products
Snapd Ubuntu Linux
CVE-2020-11931

Ubuntu modifications to pulseaudio to provide snap security enforcement could be unloaded

An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps which plugs any of pulseaudio, audio-playback or audio-record via unloading the pulseaudio snap policy module. This issue affects: pulseaudio 1:8.0 versions prior to 1:8.0-0ubuntu3.12; 1:11.1 versions prior to 1:11.1-1ubuntu7.7; 1:13.0 versions prior to 1:13.0-1ubuntu1.2; 1:13.99.1 versions prior to 1:13.99.1-1ubuntu3.2;

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Pulseaudio
Products
Ubuntu Linux Pulseaudio
CVE-2020-11884

Kernel: s390: page table upgrade in secondary address mode may lead to privilege escalation

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 35 more
CVE-2020-11793

webkitgtk: use-after-free via crafted web content

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash).

CVSS 3.1 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Canonical Fedoraproject Opensuse and 3 more
Products
Ubuntu Linux Fedora Leap and 3 more
CVE-2020-11765

OpenEXR: off-by-one error in ImfXdr.h read function by DwaCompressor::Classifier::Classifier leading to an out-of-bounds read

An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11764

OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Icloud Ipados Iphone Os and 10 more
CVE-2020-11763

OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Icloud Ipados Iphone Os and 10 more
CVE-2020-11762

OpenEXR: out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11761

OpenEXR: out-of-bounds read during Huffman uncompression

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11760

OpenEXR: out-of-bounds read during RLE uncompression in rleUncompress function in ImfRle.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11759

OpenEXR: out-of-bounds write due to integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Apple Canonical Debian and 2 more
Products
Icloud Ipados Iphone Os and 8 more
CVE-2020-11758

OpenEXR: out-of-bounds read in ImfOptimizedPixelReading.h

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.

CVSS 3.1 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11736

file-roller: directory traversal via directory symlink pointing outside of the target directory

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Gnome and 1 more
Products
Ubuntu Linux Debian Linux File-roller and 1 more
CVE-2020-11608

kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c

An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka CID-998912346c0d.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux
CVE-2020-11565

kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c

An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 1 more
CVE-2020-11538

python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.

CVSS 3.1 · 8.1 High EPSS 2.5% KEV · Not listed
Vendors
Canonical Fedoraproject Python and 1 more
Products
Ubuntu Linux Fedora Pillow and 4 more
CVE-2020-11526

freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later

libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read.

CVSS 3.1 · 2.2 Low EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Freerdp and 2 more
Products
Ubuntu Linux Debian Linux Freerdp and 2 more