DEBIAN-CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

Amplification Attacks

PowerDNS Recursor is vulnerable toamplification attacks. It does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafte...

UBUNTU-CVE-2020-10756

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...

PT-2020-22324

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided input. Description A heap-buffer-overflow READ 16 crash has been reported. The crash occurs in the ares parse aaaa reply function, as indicated by the crash state in the OSS-Fuzz...

PT-2020-22382

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 4, and it occurs in the ares...

PT-2020-22473

Name of the Vulnerable Software and Affected Versions c-ares affected versions not specified Description The issue is related to a heap-double-free crash. Technical details about the crash include the function ares parse soa reply in the file ares-test-fuzz.c. Recommendations At the moment, there...

Unspecified Vulnerability in Mattermost Mobile Apps (CNVD-2020-35185)

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps versions prior to 1.26.0 that stems from the Quick Reply feature failing to properly handle specially crafted recoveries. No details of the vulnerability are...

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

Design/Logic Flaw

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

CVE-2019-20848

Mattermost Mobile Apps

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

PT-2020-10811

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 1.26.0 Description An issue was discovered in the Quick Reply feature, which mishandles crafted replies. Recommendations For versions prior to 1.26.0, update to version 1.26.0 or later to resolve the...

CVE-2019-20848: Improper Input Validation

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

PT-2020-13771

Name of the Vulnerable Software and Affected Versions Pengutronix Barebox versions prior to v2020.05.0 Description The issue is related to an out-of-bounds read in the nfs read reply function located in net/nfs.c. This occurs because a field from an incoming network packet is used directly as a...

PT-2020-6201

Name of the Vulnerable Software and Affected Versions QEMU versions 5.0.0 and earlier QEMU versions 4.2.0 Description The issue is related to an out-of-bounds read in the megasas lookup frame function in hw/scsi/megasas.c. This can be triggered via a crafted reply queue head field from a guest OS...

PT-2020-6913

Name of the Vulnerable Software and Affected Versions c-ares versions 1 16 1 through 1 17 0 Description The issue is related to a buffer overflow vulnerability in the ares parse soa reply function of the c-ares library, which handles asynchronous DNS requests. This vulnerability can be exploited ...

CVE-2020-12137

GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing,...

Code injection

GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing,...