4554 matches found
CVE-2020-14568
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...
CVE-2020-15117
Removed by vendor...
CVE-2020-15117
Synergy before version 1.12.0 is vulnerable to a denial of service where a kMsgHelloBack packet with a client name length of 0xffffffff can crash the server if available memory is under 4 GB. The issue is mitigated when the server has more than 4 GB of memory. Upstream and distribution advisories...
PT-2020-14058 · Mysql Server +3 · Mysql Server +3
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.20 and prior Description: The issue allows a low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or...
DEBIAN-CVE-2020-14303
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...
Design/Logic Flaw
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...
UBUNTU-CVE-2020-14303
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...
CVE-2020-14303
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...
CVE-2020-14303
CVE-2020-14303 affects Samba’s AD DC NBT server: an empty UDP packet to port 137 can cause a CPU spin and denial of service in Samba versions before the patched releases. The public documents identify Samba AD DC NBT as the vulnerable component and list fixed versions in downstream advisories: Sa...
CVE-2020-14303
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash. Mitigation The NetBIOS over TCP/IP name resolution protocol is implemented as a UDP datagram on port 137...
Debian DSA-4711-1 : coturn - security update
Several vulnerabilities were discovered in coturn, a TURN and STUN server for VoIP. - CVE-2020-4067 Felix Doerre reported that the STUN response buffer was not properly initialised, which could allow an attacker to leak bytes in the padding bytes from the connection of another client. -...
[SECURITY] [DSA 4711-1] coturn security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4711-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 29, 2020 https://www.debian.org/security/faq -...
Stack overflow
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force I...
CVE-2020-4433
Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execute arbitrary code on the system with the privileges of root or cause server to crash. IBM X-Force I...
CVE-2020-4433
CVE-2020-4433 concerns IBM Aspera applications vulnerable to a stack-based buffer overflow caused by improper bounds checking. The vulnerability could allow a remote attacker with knowledge of the system to execute arbitrary code with root privileges or cause the server to crash. The IBM security...
Cisco Identity Services Engine Denial of Service Vulnerability (CNVD-2020-36263)
Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A denial of service...
Fedora 32 : 1:dovecot (2020-1dee17d880)
CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn't start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to...
CVE-2020-3353
A vulnerability in the syslog processing engine of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a race condition that may occur when syslog messages are processed. A...
