CVE-2019-19045

CVE-2019-19045 affects the Linux kernel prior to 5.3.11 due to a memory leak in mlx5_fpga_conn_create_cq() (drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c). The issue allows local attackers to cause memory DoS by triggering mlx5_vector2eqn() failures. Ubuntu/Unity/SUSE advisories cite the sa...

CVE-2020-14583

CVE-2020-14583 affects Oracle Java SE/Java SE Embedded (Libraries component). Affected: Java SE 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded 8u251. Exploitation requires network access with user interaction and can lead to takeover of Java SE/Embedded with high impact on confidentiality, int...

CVE-2018-20482

CVE-2018-20482 affects GNU tar: when using --sparse, tar can enter an infinite read loop during file shrinkage, enabling a local attacker to cause a denial of service by modifying a file being archived by another user. Affected until upstream tar versions prior to the fix; remediation is to upgra...

CVE-2020-0556

Concretely, CVE-2020-0556 affects BlueZ HID/HOGP handling. The vulnerability arises from improper access control: BlueZ before 5.54 does not require bonding between HID devices and hosts, enabling an unauthenticated attacker with adjacent access to impersonate an HID device, establish encrypted l...

CVE-2017-13081

CVE-2017-13081 describes a KRACK-class flaw in WPA/WPA2 where the Integrity Group Temporal Key (IGTK) can be reinstalled during the group key handshake. This enables an attacker within radio range to spoof frames from APs to clients, potentially undermining confidentiality and integrity of WPA/WP...

CVE-2019-15090

CVE-2019-15090 affects the Linux kernel driver component drivers/scsi/qedi/qedi_dbg.c, with an out-of-bounds read in the qedi_dbg_* family of functions for versions before 5.1.12. The issue can enable a local attacker to read memory due to improper bounds handling, as described in the CVE entry. ...

CVE-2019-9675

CVE-2019-9675 affects PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. The issue is a buffer overflow in phar_tar_writeheaders_int (ext/phar/tar.c) triggered by a long link value; vendor notes the link value is only used if an archive contains a symlink, which currently cannot happen, making a pract...

CVE-2020-12769

CVE-2020-12769 affects the Linux kernel prior to 5.4.17. The issue is in drivers/spi/spi-dw.c, where concurrent calls to dw_spi_irq and dw_spi_transfer_one can trigger a kernel panic (local exploit). The vulnerability is fixed in Linux kernel 5.4.17 (see ChangeLog-5.4.17). No exploit details are ...

CVE-2020-25212

CVE-2020-25212 affects the NFSv4 client in the Linux kernel and is caused by a TOCTOU mismatch where a size check is performed in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c. This can allow a local attacker to corrupt memory or cause unspecified impacts. The issue is addressed in the upstream k...

CVE-2020-2773

CVE-2020-2773 is a vulnerability in Oracle Java SE and Java SE Embedded (component: Security) that can be exploited remotely by unauthenticated attackers to cause a partial denial of service on affected Java runtimes. Affected versions include Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedde...

CVE-2020-2601

CVE-2020-2601 affects Oracle Java SE and Java SE Embedded Security components. Affected Java SE: 7u241, 8u231, 11.0.5, 13.0.1; Java SE Embedded: 8u231. Root cause is a Kerberos-related issue that can be exploited by an unauthenticated attacker with network access, potentially allowing access to s...

CVE-2020-12767

The CVE-2020-12767 issue affects libexif version 0.6.21, where exif_entry_get_value in exif-entry.c has a divide-by-zero condition. Multiple connected notices confirm this specific vulnerability in libexif 0.6.21 and reference fix/mitigation in subsequent releases (notably libexif 0.6.22). Practi...

CVE-2020-0569

CVE-2020-0569 : Intel® PROSet/Wireless WiFi software for Windows 10 is affected by an out-of-bounds write vulnerability that could allow an authenticated local user to cause a denial of service via adjacent access. Intel’s advisory lists affected products including Intel® Wi-Fi 6 AX201/AX200, Wir...

CVE-2019-15030

CVE-2019-15030 affects the Linux kernel on powerpc up to 5.2.14. A local user can read another local process’s vector registers by exploiting a Facility Unavailable exception when starting a transaction (tbegin) and then accessing vector registers; at some point, vector registers may be corrupted...

CVE-2019-19062

CVE-2019-19062 describes a memory leak in the crypto_report() function (crypto/crypto_user_base.c) of Linux kernels up to 5.3.11, which can cause denial of service via memory exhaustion when crypto_report_alg() failures occur. The connected documents confirm the vulnerability and its impact but d...

CVE-2019-3859

CVE-2019-3859 affects libssh2 prior to 1.8.1, with an out-of-bounds read in the _libssh2_packet_require and _libssh2_packet_requirev paths. Multiple connected advisories confirm this as part of a broader set of libssh2 issues (CVE-2019-3855 to 3863) that can allow a remote attacker (via a comprom...

CVE-2020-14593

CVE-2020-14593 is a vulnerability in the 2D component of Oracle Java SE/SE Embedded. Affected: Java SE 7u261, 8u251, 11.0.7, 14.0.1; Java SE Embedded 8u251. Vulnerability type is unspecified in the provided sources, but exploitation is described as unauthenticated with network access via multiple...

CVE-2020-2583

CVE-2020-2583 affects OpenJDK/OpenJDK-derived packages across multiple vendors and OSes, with the Serialization component (and related areas) being impacted. Public advisories in Debian (DLA-2128-1) and CentOS/Red Hat family outline affected versions such as Java 7u241/8u231/11.0.5/13.0.1 (and em...

CVE-2020-14579

CVE-2020-14579 affects Oracle Java SE/Embedded (Libraries component) with affected Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. The connected advisories confirm network-remote, unauthenticated access leading to a partial denial of service via multiple protocols, per CVSS 3.1 Base Score 3.7 ...

CVE-2020-8834

Affected software: Linux kernel KVM for PowerPC (KVM with Book3S HV on Power8). Vulnerability arises from conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry and in kvmppc_save_tm()/kvmppc_restore_tm, leading to stack corruption. Consequence: a guest VM kernel-space code execut...

CVE-2019-3816

CVE-2019-3816 affects Openwsman up to 2.6.9, where the daemon’s working directory was incorrectly set to the root, enabling a remote, unauthenticated attacker to disclose arbitrary files via a crafted HTTP request to the Openwsman server. Several connected advisories confirm affected packages and...

CVE-2019-8321

CVE-2019-8321 is an escape sequence injection vulnerability in RubyGems: Gem::UserInteraction#verbose calls say without escaping, enabling injection in RubyGems versions 2.6 and later up to 3.0.2. Connected advisories (Debian DLA-2330-1, ALAS-2019-1255, Alpine Linux, Debian tracker) confirm the i...

CVE-2020-14796

CVE-2020-14796 affects the Libraries component in Oracle Java SE/Java SE Embedded across multiple OpenJDK builds (e.g., Java-7u271? Java-8u261? Java-11.0.8? Java-15; Embedded 8u261). The vulnerability can be exploited by an unauthenticated attacker over network protocols, but exploitation require...

CVE-2020-10769

CVE-2020-10769 affects RH kernel versions prior to 5.0, where a buffer over-read in crypto_authenc_extractkeys (crypto/authenc.c) can be triggered when a payload exceeds 4 bytes and is not 4-byte aligned. This leads to a local privilege, user-level denial of service via a system crash. Public ref...

CVE-2020-13398

CVE-2020-13398 affects FreeRDP prior to 2.1.1, with an out-of-bounds write in libfreerdp/crypto/crypto.c (crypto_rsa_common). The available connected advisories/public notices confirm this is a boundary-write issue in the RSA crypto code. Impact details in the provided documents are limited to th...

CVE-2020-8130

CVE-2020-8130 is an OS command injection in Ruby Rake prior to 12.3.3, affecting the Rake::FileList handling of filenames starting with the pipe character |. Root cause: unsafe processing of external input in FileList leads to command execution. Impact: potential arbitrary OS commands if such fil...

CVE-2019-2973

CVE-2019-2973 is an issue in Oracle Java SE/Java SE Embedded (component: JAXP) affecting OpenJDK/OpenJDK builds such as 7u231, 8u221, 11.0.4 and 13 (and Embedded 8u221). The vulnerability allows unauthenticated network-accessed exploitation that can cause a partial denial of service in Java SE/SE...

CVE-2020-2756

CVE-2020-2756 affects Oracle Java SE/Java SE Embedded (component: Serialization). Affected: Java SE 7u251, 8u241, 11.0.6, 14; Java SE Embedded 8u241. An unauthenticated, network-exposed attacker can exploit to cause a partial Denial of Service. Connected advisories show remediation via updating t...

CVE-2020-8449

CVE-2020-8449 affects Squid prior to 4.10. The issue arises from improper input validation in HTTP request processing , allowing crafted requests to access resources that should be blocked by security filters. The connected advisories confirm a fix was released across multiple distributions (e.g....

CVE-2020-13962

CVE-2020-13962 affects Qt 5.12.2–5.14.2 as used in unofficial builds of Mumble 1.3.0 and other products. The issue arises from mishandling OpenSSL’s error queue, causing a denial of service to QSslSocket users and, due to error leakage across sessions, potentially disconnecting another session wh...

CVE-2019-18934

CVE-2019-18934 — technical details : Unbound versions 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can lead to shell code execution when the resolver is compiled with --enable-ipsecmod and ipsecmod is active in configuration. Exploitation requires the specific build and en...

CVE-2019-19462

CVE-2019-19462 affects Linux kernel: relay_open in kernel/relay.c, vulnerable through kernel version 5.4.1, allows local attackers to cause a denial of service (e.g., relay blockage) by triggering a NULL alloc_percpu result. The connected UNITY_LINUX advisories reproduce this description and refe...

CVE-2020-14792

CVE-2020-14792 is an Oracle Java OpenJDK vulnerability affecting Java SE and Embedded runtimes (Hotspot/Libraries components) with the root issue described as “Better range handling.” Affected versions include Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. The connected advisories...

CVE-2020-3868

CVE-2020-3868 involves multiple memory corruption issues that are fixed by improved memory handling. The public advisories indicate the vulnerability could allow arbitrary code execution when processing malicious web content. The documented fixes show updates across Apple platforms: iOS 13.3.1 an...

CVE-2019-20382

Summary of CVE-2019-20382 (mode C) QEMU 4.1.0 is affected by a memory leak in zrle_compress_data (ui/vnc-enc-zrle.c) during a VNC disconnect. The leak is due to incorrect use of libz, where memory allocated in deflateInit2 may not be freed by deflateEnd. This leads to a leak of allocated memory o...

CVE-2019-19046

CVE-2019-19046 is a memory-leak in Linux kernel drivers/char/ipmi/ipmi_msghandler.c (__ipmi_bmc_register) up to kernel 5.3.11. An ida_simple_get() failure can cause memory consumption leading to DoS; exploitation details are described in the CVE entry, including note that third parties dispute th...

CVE-2020-14352

CVE-2020-14352 : Librepo before 1.12.1 contains a directory traversal vulnerability due to inadequate sanitization of paths in remote repository metadata. An attacker hosting a remote repository could copy files outside the destination directory by crafting repository metadata/URLs, potentially e...

CVE-2019-2894

CVE-2019-2894 affects Oracle Java SE/OpenJDK components (Security) in Java SE 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Impact: allows an unauthenticated attacker over the network to read a subset of data in Java SE/Embedded. Public advisories confirm this CVE is being addressed in mu...

CVE-2020-12662

CVE-2020-12662 affects the Unbound DNS resolver. Upstream, the issue is a network amplification (NXNSAttack) vulnerability triggered by random subdomains in NS records, with Unbound versions before 1.10.1 identified as vulnerable. Connected advisories note that Red Hat Enterprise Linux 7 received...

CVE-2018-1000802

CVE-2018-1000802 affects CPython 2.7, where shutil.make_archive is vulnerable to command injection. A specially crafted input to the function can lead to Denial of Service and potential information gain via arbitrary file creation, as described in multiple advisories. The issue stems from imprope...

CVE-2019-3861

Summary: CVE-2019-3861 is an out-of-bounds read flaw in libssh2 before 1.8.1 related to parsing SSH packets with a padding length greater than the packet length. A remote attacker could cause a Denial of Service or read client memory. Affected software: libssh2 (client-side library) across multip...

CVE-2017-13079

CVE-2017-13079 is a KRACK-type vulnerability affecting WPA/WPA2 where reinstallation of the Integrity Group Temporal Key (IGTK) can occur during the 4-way handshake. An attacker in radio range can spoof frames from APs to clients by exploiting IGTK reinstallation. Public disclosures and advisorie...

CVE-2018-1128

CVE-2018-1128 describes a replay vulnerability in the Cephx authentication protocol where a packet sniffer on a Ceph cluster network can authenticate to Ceph services due to insufficient verification of clients. The issue affects the msgr2 protocol (used by most Ceph communication) and can compro...

CVE-2019-16231

CVE-2019-16231 affects Linux kernel 5.2.14 through a NULL pointer dereference caused by failing to check the return value of alloc_workqueue in drivers/net/fjes/fjes_main.c. The description specifies this root cause and the potential impact (remote kernel crash) but does not provide details on af...

CVE-2020-2805

CVE-2020-2805 is an OpenJDK/OpenJDK Libraries issue. The connected Chainguard entry states the flaw resides in the readObject() method of the MethodType class within the Libraries component of OpenJDK, which can allow an untrusted Java applet or application to bypass Java sandbox restrictions. Th...

CVE-2019-16884

Summary of CVE-2019-16884 (runc) : The vulnerability affects runc (as used in Docker and similar), where a flaw in libcontainer/rootfs_linux.go allows an AppArmor/SELinux restriction bypass by a malicious image that can mount over a container’s /proc directory. This arises from an incorrect check...

CVE-2020-16092

CVE-2020-16092 affects QEMU up to 5.0.0, specifically the network packet processing path. The vulnerability is an assertion failure in net_tx_pkt_add_raw_fragment() within hw/net/net_tx_pkt.c, impacting the e1000e and vmxnet3 devices. A malicious guest user/process could trigger this assertion to...

CVE-2017-13080

CVE-2017-13080 corresponds to the WPA2/Wi‑Fi Key Reinstallation Attack (KRACK) risk, where a network-adjacent attacker can leverage a flaw in the group key handshake to reinstall GTK keys and replay frames. The core description in the initial document confirms: an attacker in radio range can repl...

CVE-2018-18506

CVE-2018-18506 is a PAC-related issue where a PAC file can cause localhost requests to be proxied. Connected documents confirm Thunderbird is affected and publicly patched: Thunderbird 60.6.1 fixes were released across AL2 (ALAS2-2019-1195), CentOS/RHEL advisories (RHSA-2019:0680/0681), and Debia...

CVE-2019-12973

Context: CVE-2019-12973 affects OpenJPEG 2.3.1. Vulnerability: In opj_t1_encode_cblks (openjp2/t1.c), excessive iteration can be exploited by a crafted BMP file to cause a denial of service. This is consistent with related issues in OpenJPEG’s t1.c handling. Impact (as stated): Remote denial of s...