Export limit exceeded: 425897 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 17087 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,087

Export CSV
CVE-2020-36318

rust: use-after-free or double free in VecDeque::make_contiguous

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Redhat Rust-lang
Products
Devtools Enterprise Linux Rust
CVE-2020-36317

rust: memory safety violation in String::retain()

In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Redhat Rust-lang
Products
Devtools Enterprise Linux Rust
CVE-2020-36314

file-roller: directory traversal via directory symlink pointing outside of the target directory (incomplete fix for CVE-2020-11736)

fr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-11736.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnome Redhat
Products
Fedora File-roller Enterprise Linux
CVE-2020-36312

kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c

An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2020-36242

python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow

In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

CVSS 3.1 · 9.1 Critical EPSS 6.8% KEV · Not listed
Vendors
Cryptography.io Fedoraproject Oracle and 1 more
Products
Cryptography Fedora Communications Cloud Native Core Network Function Cloud Native Environment and 3 more
CVE-2020-36241

gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory

autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnome Redhat
Products
Fedora Gnome-autoar Enterprise Linux
CVE-2020-36158

kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 2 more
Products
Debian Linux Fedora Linux Kernel and 4 more
CVE-2020-35655

python-pillow: Buffer over-read in SGI RLE image reader

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.

CVSS 3.1 · 5.4 Medium EPSS 1.7% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Enterprise Linux
CVE-2020-35653

python-pillow: Buffer over-read in PCX image reader

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.

CVSS 3.1 · 7.1 High EPSS 1.6% KEV · Not listed
Vendors
Debian Fedoraproject Python and 1 more
Products
Debian Linux Fedora Pillow and 2 more
CVE-2020-35524

libtiff: Heap-based buffer overflow in TIFF2PDF tool

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Libtiff and 2 more
Products
Debian Linux Fedora Libtiff and 2 more
CVE-2020-35523

libtiff: Integer overflow in tif_getimage.c

An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Debian Libtiff Netapp and 1 more
Products
Debian Linux Libtiff Ontap Select Deploy Administration Utility and 1 more
CVE-2020-35518

389-ds-base: information disclosure during the binding of a DN

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

CVSS 3.1 · 5.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat
Products
389 Directory Server Directory Server Enterprise Linux and 1 more
CVE-2020-35517

QEMU: virtiofsd: potential privileged host device access from guest

A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Advanced Virtualization Enterprise Linux
CVE-2020-35513

kernel: Nfsd failure to clear umask after processing an open or create

A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with access to the NFS could use this flaw to starve the resources causing denial of service.

CVSS 3.1 · 4.9 Medium EPSS 1.4% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Extras Rt
CVE-2020-35508

kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent

A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel A700s A700s Firmware and 31 more
CVE-2020-35452

mod_auth_digest possible stack overflow by one nul byte

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow

CVSS 3.1 · 7.3 High EPSS 53.2% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 2 more
Products
Http Server Debian Linux Fedora and 5 more
CVE-2020-35448

binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.

CVSS 3.1 · 3.3 Low EPSS 1.2% KEV · Not listed
Vendors
Gnu Netapp Redhat
Products
Binutils Ontap Select Deploy Administration Utility Enterprise Linux
CVE-2020-35113

Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6

Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Firefox Esr Thunderbird and 3 more