linux

CVEs (10,018)

• CVE-2020-11046MedMay 7, 2020
  Freerdp

  Freerdp
  risk 0.00cvss 5.5epss 0.01

  In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.

• CVE-2020-11045LowMay 7, 2020
  Freerdp

  Freerdp
  risk 0.00cvss 2.2epss 0.02

  In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.

• CVE-2020-11044LowMay 7, 2020
  Freerdp

  Freerdp
  risk 0.00cvss 2.2epss 0.02

  In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0.

• CVE-2020-11042MedMay 7, 2020
  Freerdp

  Freerdp
  risk 0.00cvss 5.5epss 0.02

  In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading a attacker-defined amount of client memory (32bit unsigned -> 4GB) to an intermediate buffer. This can be used to crash the client or store information for…

• CVE-2020-12653HigMay 5, 2020
  Linux

  Kernel
  risk 0.00cvss 7.8epss 0.00

  An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

• CVE-2020-12626MedMay 4, 2020
  Roundcube

  Webmail
  risk 0.00cvss 6.5epss 0.02

  An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered.

• CVE-2020-12625MedMay 4, 2020
  Roundcube

  Webmail
  risk 0.00cvss 6.1epss 0.03

  An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.

• CVE-2020-11884HigApr 29, 2020
  Linux

  Kernel
  risk 0.00cvss 7.0epss 0.00

  In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A…

• CVE-2020-12284CriApr 28, 2020
  FFmpeg

  Ffmpeg
  risk 0.00cvss 9.8epss 0.04

  cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

• CVE-2020-12279CriApr 27, 2020
  Libgit2

  Libgit2
  risk 0.00cvss 9.8epss 0.05

  An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1353.

• CVE-2020-12278CriApr 27, 2020
  Libgit2

  Libgit2
  risk 0.00cvss 9.8epss 0.05

  An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1352.

• CVE-2020-11810LowApr 27, 2020
  OpenVPN

  OpenVPN
  risk 0.00cvss 3.7epss 0.02

  An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the…

• CVE-2020-12268CriApr 27, 2020
  Artifex

  Jbig2dec
  risk 0.00cvss 9.8epss 0.03

  jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.

• CVE-2020-1983HigApr 22, 2020
  libslirp

  libslirp
  risk 0.00cvss 7.5epss 0.02

  A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

• CVE-2020-12066HigApr 22, 2020
  Teeworlds

  Teeworlds
  risk 0.00cvss 7.5epss 0.03

  CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server.

• CVE-2020-11008MedApr 21, 2020
  Git

  Git
  risk 0.00cvss 4.0epss 0.04

  Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an exploit where _some_…

• CVE-2020-11736LowApr 13, 2020
  GNOME Foundation

  File Roller
  risk 0.00cvss 3.9epss 0.01

  fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

• CVE-2020-11724HigApr 12, 2020
  OpenResty

  Openresty
  risk 0.00cvss 7.5epss 0.03

  An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.

• CVE-2020-11501HigApr 3, 2020
  GNU

  Gnutls
  risk 0.00cvss 7.4epss 0.03

  GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS…

• CVE-2020-11494MedApr 2, 2020
  Linux

  Kernel
  risk 0.00cvss 4.4epss 0.01

  An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks…