Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,087

Export CSV
CVE-2020-25275

dovecot: Denial of service via mail MIME parsing

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.

CVSS 3.1 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Debian Dovecot Fedoraproject and 1 more
Products
Debian Linux Dovecot Fedora and 1 more
CVE-2020-25212

kernel: TOCTOU mismatch in the NFS client code

A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2020-25211

kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c

In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 1 more
Products
Debian Linux Fedora Linux Kernel and 6 more
CVE-2020-25097

squid: improper input validation may allow a trusted client to perform HTTP request smuggling

An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the security controls. This occurs for certain uri_whitespace configuration settings.

CVSS 3.1 · 8.6 High EPSS 7.3% KEV · Not listed
Vendors
Debian Fedoraproject Netapp and 2 more
Products
Debian Linux Fedora Cloud Manager and 3 more
CVE-2020-24870

LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp

Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Libraw Redhat
Products
Libraw Enterprise Linux
CVE-2020-24606

squid: Improper input validation could result in a DoS

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cache_peer is used with the cache digests feature. The problem exists because peerDigestHandleReply() livelocking in peer_digest.cc mishandles EOF.

CVSS 3.1 · 8.6 High EPSS 4.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2020-24587

kernel: Reassembling fragments encrypted under different keys

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

CVSS 3.1 · 2.6 Low EPSS 2.6% KEV · Not listed
Vendors
Arista Cisco Debian and 4 more
Products
C-100 C-100 Firmware C-110 and 330 more
CVE-2020-24586

kernel: Fragmentation cache not cleared on reconnection

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

CVSS 3.1 · 3.5 Low EPSS 5.8% KEV · Not listed
Vendors
Arista Debian Ieee and 3 more
Products
C-200 C-200 Firmware C-230 and 42 more
CVE-2020-24553

golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS

Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.

CVSS 3.1 · 6.1 Medium EPSS 3.6% KEV · Not listed
Vendors
Fedoraproject Golang Opensuse and 2 more
Products
Fedora Go Leap and 3 more
CVE-2020-24504

kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers

Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Intel Redhat
Products
Ethernet Network Adapter E810-cqda1 Ethernet Network Adapter E810-cqda1 For Ocp Ethernet Network Adapter E810-cqda1 For Ocp 3.0 and 8 more
CVE-2020-24503

kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers

Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Intel Redhat
Products
Ethernet Network Adapter E810-cqda1 Ethernet Network Adapter E810-cqda1 For Ocp Ethernet Network Adapter E810-cqda1 For Ocp 3.0 and 8 more
CVE-2020-24502

kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers

Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may allow an authenticated user to potentially enable a denial of service via local access.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Intel Redhat
Products
Ethernet Network Adapter E810-cqda1 Ethernet Network Adapter E810-cqda1 For Ocp Ethernet Network Adapter E810-cqda1 For Ocp 3.0 and 8 more
CVE-2020-24490

kernel: net: bluetooth: heap buffer overflow when processing extended advertising report events

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Bluez Linux Redhat
Products
Bluez Linux Kernel Enterprise Linux
CVE-2020-24394

kernel: umask not applied on filesystem without ACL support

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Opensuse and 3 more
Products
Ubuntu Linux Linux Kernel Leap and 8 more
CVE-2020-24386

dovecot: IMAP hibernation function allows mail access

An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages (and path disclosure).

CVSS 3.1 · 6.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Debian Dovecot Fedoraproject and 1 more
Products
Debian Linux Dovecot Fedora and 1 more
CVE-2020-24332

trousers: tss user can be used to create or corrupt existing files, this could lead to DoS

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks. The tss user can be used to create or corrupt existing files, which could possibly lead to a DoS attack.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat Trustedcomputinggroup
Products
Fedora Enterprise Linux Trousers
CVE-2020-24331

trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat Trousers Project
Products
Fedora Enterprise Linux Trousers
CVE-2020-24330

trousers: fails to drop the root gid privilege when no longer needed

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat Trousers Project
Products
Fedora Enterprise Linux Trousers
CVE-2020-24303

grafana: XSS via a query alias for the Elasticsearch and Testdata datasource

Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.

CVSS 3.1 · 6.1 Medium EPSS 2.1% KEV · Not listed
Vendors
Grafana Redhat
Products
Grafana Enterprise Linux
CVE-2020-23903

speex: divide by zero in read_samples() via crafted WAV file

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

CVSS 3.1 · 5.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Fedoraproject Redhat Xiph
Products
Fedora Enterprise Linux Speex