USN-4425-1 linux, linux-aws, linux-azure, linux-azure-5.4, linux-gcp, linux-hwe-5.4, linux-kvm, linux-oracle, linux-raspi, linux-raspi-5.4, linux-riscv vulnerabilities

It was discovered that the network block device nbd implementation in the Linux kernel did not properly check for error conditions in some situations. An attacker could possibly use this to cause a denial of service system crash. CVE-2019-16089 It was discovered that the kernel-user space relay...

CVE-2020-15592

SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes...

SUSE SLED15 / SLES15 Security Update : perl-YAML-LibYAML (SUSE-SU-2020:2025-1)

This update for perl-YAML-LibYAML fixes the following issues : perl-YAML-LibYAML was updated to 0.69: bsc1173703 Security fix: Add $LoadBlessed option to turn on/off loading objects: Default is set to true. Note that, the behavior is unchanged. Clarify documentation about exported functions Dump...

PT-2020-14517

Name of the Vulnerable Software and Affected Versions SteelCentral Aternity Agent versions prior to 11.0.0.120 Description The issue allows for privilege escalation via a crafted file. It involves an executable running as a high-privileged Windows service that performs administrative tasks and...

OPENSUSE-SU-2020:1089-1 Security update for perl-YAML-LibYAML

This update for perl-YAML-LibYAML fixes the following issues: perl-YAML-LibYAML was updated to 0.69: bsc1173703 Security fix: Add $LoadBlessed option to turn on/off loading objects: Default is set to true. Note that, the behavior is unchanged. Clarify documentation about exported functions Dump w...

PT-2020-21615

Name of the Vulnerable Software and Affected Versions perl-YAML-LibYAML versions prior to 0.69 Description The issue concerns a security fix in perl-YAML-LibYAML, where an option $LoadBlessed has been added to control the loading of objects. The default setting for this option is true, which mean...

PT-2020-21614

Name of the Vulnerable Software and Affected Versions perl-YAML-LibYAML versions prior to 0.69 Description The issue concerns a security fix in perl-YAML-LibYAML, where an option $LoadBlessed has been added to control the loading of objects. The default setting for this option is true, and it doe...

PT-2020-22734

Name of the Vulnerable Software and Affected Versions perl-YAML-LibYAML versions prior to 0.69 Description The issue concerns a security fix in perl-YAML-LibYAML, where the $LoadBlessed option has been added to control the loading of objects. By default, this option is set to true, and the behavi...

CVE-2020-15816

In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection by using DYLD environment variables...

CVE-2020-7696

The CVE-2020-7696 entry affects all versions of react-native-fast-image. When an image is loaded with headers that include sensitive data (e.g., host and authorization in the request headers), subsequent images reuse those headers, causing potential leakage of signing credentials or session token...

CVE-2020-15801

In Python 3.8.4, sys.path restrictions specified in a python38.pth file are ignored, allowing code to be loaded from arbitrary locations. The .pth file e.g., the python.pth file is not affected...

CVE-2020-15780

A flaw was found in how the ACPI table loading through acpiconfigfs was handled when the kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

CVE-2019-20908

A flaw was found in how the ACPI table loading through the EFI variable and the related efivarssdt boot option was handled when the Linux kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerabilit...

CVE-2020-4100

"HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which components of the application should not be loaded by default when the application is started. Typically, core components and additional dependencies are loaded natively at runtime;...

CVE-2020-4100

"HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which components of the application should not be loaded by default when the application is started. Typically, core components and additional dependencies are loaded natively at runtime;...

Design/Logic Flaw

"HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which components of the application should not be loaded by default when the application is started. Typically, core components and additional dependencies are loaded natively at runtime;...

CVE-2020-4100

"HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which components of the application should not be loaded by default when the application is started. Typically, core components and additional dependencies are loaded natively at runtime;...

CVE-2020-4100

HCL Verse for Android is affected by a vulnerability linked to its use of dynamic code loading. The root cause is the ability to load components at runtime, which can lead to loading unintended code if not implemented properly. Some connected reports explicitly describe a HCL Verse Android code-e...

PT-2020-14526

Name of the Vulnerable Software and Affected Versions Trend Micro Secuity 2020 versions 16.0.0.1146 and below Description An untrusted search path remote code execution issue could allow an attacker to run arbitrary code on a vulnerable system. The Trend Micro installer tries to load DLL files fr...

OpenShift Code Data Compromise Man-in-the-Middle

The vulnerability of OpenShift container platforms relates to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...