Code injection

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

CVE-2020-5801

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...

CVE-2020-5807

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

CVE-2020-5802

CVE-2020-5802 affects Rockwell Automation FactoryTalk Linx (RSLinxNG.exe) via an attacker-controlled memory allocation size passed to the C++ new operator in RnaDaSvr.dll when a ConfigureItems message is sent to TCP port 4241. This unhandled exception can terminate RSLinxNG.exe, causing a denial-...

Rockwell Automation FactoryTalk Linx Code Issue Vulnerability

Rockwell Automation FactoryTalk Linx is a set of industrial communication solutions from Rockwell Rockwell Automation. The product is primarily used to communicate between small applications and large automation systems, among others. A security vulnerability exists in FactoryTalk Linx, which can...

PT-2020-18724

Name of the Vulnerable Software and Affected Versions FactoryTalk Diagnostics versions prior to the fixed version Description An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can speci...

PT-2020-5521

Name of the Vulnerable Software and Affected Versions FactoryTalk Linx affected versions not specified Description The issue is related to the CFTLDManager::HandleRequest function in RnaDaSvr.dll, which can be triggered by an attacker sending an OpenNamespace message to port 4241 with a valid...

CVE-2020-5807: Improper Handling of Exceptional Conditions

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

CVE-2020-5801: Improper Handling of Exceptional Conditions

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...

pygments:pygments_fuzzer: Uncaught exception in get_tokens_unprocessed

Project: https://github.com/pygments/pygments.git Detailed Report: https://oss-fuzz.com/testcase?key=4836579327737856 Project: pygments Fuzzing Engine: libFuzzer Fuzz Target: pygmentsfuzzer Job Type: libfuzzerubsanpygments Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

pygments:pygments_fuzzer: Uncaught exception in get_tokens_unprocessed

Project: https://github.com/pygments/pygments.git Detailed Report: https://oss-fuzz.com/testcase?key=5434047438389248 Project: pygments Fuzzing Engine: libFuzzer Fuzz Target: pygmentsfuzzer Job Type: libfuzzerasanpygments Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash Stat...

bs4:bs4_fuzzer: Uncaught exception in bs4_fuzzer.pkg

Detailed Report: https://oss-fuzz.com/testcase?key=5762680484921344 Project: bs4 Fuzzing Engine: libFuzzer Fuzz Target: bs4fuzzer Job Type: libfuzzerasanbs4 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: bs4fuzzer.pkg bs4fuzzer.pkg bs4fuzzer.pkg Sanitizer: address...

ZTE Multiple Products Access Control Error Vulnerability

The ZTE E8810 and others are a smart cloud router from the Chinese company ZTE. A security vulnerability exists in the ZTE E8810/E8820/E8822 series, which is caused by the device's inability to verify the validity of an exception message. A remote attacker could use this vulnerability to connect ...

PT-2020-19291

Name of the Vulnerable Software and Affected Versions ZTE E8810 version 1.0.26 ZTE E8810 version 2.0.1 ZTE E8820 version 1.1.3L ZTE E8820 version 2.0.13 ZTE E8822 version 2.0.13 Description The issue is caused by the failure of the device to verify the validity of abnormal messages, leading to a...

CVE-2020-6881: Origin Validation Error

ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device...

Security update for gcc7 (moderate)

openSUSE Security Update: Security update for gcc7 Announcement ID: openSUSE-SU-2020:2301-1 Rating: moderate References: 1150164 1161913 1167939 1172798 1178577 1178614 1178624 1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability a...

Security update for gcc7 (moderate)

openSUSE Security Update: Security update for gcc7 Announcement ID: openSUSE-SU-2020:2300-1 Rating: moderate References: 1150164 1161913 1167939 1172798 1178577 1178614 1178624 1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability a...

[SECURITY] Fedora 33 Update: mbedtls-2.16.9-1.fc33

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

CVE-2020-15292

Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it could cause DoS due to integer-overflor IntPeGetDirectory, TOCTOU IntPeParseUnwindData or insufficie...

keycloak: Password leak by logged exception in HttpMethod class

A flaw was found in keycloak. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality...