The Linux kernel when using IPv6 allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent as demonstrated by thcping.

...

In QEMU 5.0.0 and earlier megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.

...

SUSE SLES12 Security Update : perl-PlRPC (SUSE-SU-2020:2238-1)

This update for perl-PlRPC fixes the following issues : Security notice: bsc858243, CVE-2013-7284 - Document security vulnerability on Storable and reply attack Add perl-PlRPC-CVE-2013-7284.patch Note that Tenable Network Security has extracted the preceding description block directly from the SU...

DEBIAN-CVE-2020-17446

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code on a database client via a crafted server response, because of access to an uninitialized pointer in the array data decoder...

Amplification Attacks

PowerDNS Recursor is vulnerable toamplification attacks. It does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafte...

UBUNTU-CVE-2020-10756

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...

PT-2020-22324

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided input. Description A heap-buffer-overflow READ 16 crash has been reported. The crash occurs in the ares parse aaaa reply function, as indicated by the crash state in the OSS-Fuzz...

PT-2020-22382

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 4, and it occurs in the ares...

PT-2020-22473

Name of the Vulnerable Software and Affected Versions c-ares affected versions not specified Description The issue is related to a heap-double-free crash. Technical details about the crash include the function ares parse soa reply in the file ares-test-fuzz.c. Recommendations At the moment, there...

Unspecified Vulnerability in Mattermost Mobile Apps (CNVD-2020-35185)

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps versions prior to 1.26.0 that stems from the Quick Reply feature failing to properly handle specially crafted recoveries. No details of the vulnerability are...

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

Design/Logic Flaw

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

CVE-2019-20848

Mattermost Mobile Apps

CVE-2019-20848

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

PT-2020-10811

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 1.26.0 Description An issue was discovered in the Quick Reply feature, which mishandles crafted replies. Recommendations For versions prior to 1.26.0, update to version 1.26.0 or later to resolve the...

CVE-2019-20848: Improper Input Validation

An issue was discovered in Mattermost Mobile Apps before 1.26.0. The Quick Reply feature mishandles crafted replies...

PT-2020-13771

Name of the Vulnerable Software and Affected Versions Pengutronix Barebox versions prior to v2020.05.0 Description The issue is related to an out-of-bounds read in the nfs read reply function located in net/nfs.c. This occurs because a field from an incoming network packet is used directly as a...

PT-2020-6201

Name of the Vulnerable Software and Affected Versions QEMU versions 5.0.0 and earlier QEMU versions 4.2.0 Description The issue is related to an out-of-bounds read in the megasas lookup frame function in hw/scsi/megasas.c. This can be triggered via a crafted reply queue head field from a guest OS...