Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
roject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QG2JUV4UTIA27JUE6IZLCEFP5PYSFPF4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2JYMVLTPSNYS5F7TBHKIXUZZJIJAMRX/ - https://www.debian.org/security/2020/dsa-4756 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00076.html
CVE ID: CVE-2020-17354 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T17:00:20.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: LilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. NOTE: in 2.24 and later versions, safe mode is removed, and the product no longer tries to block code execution when external files are used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lilypond.org/doc/v2.18/Doc
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lilypond.org/doc/v2.18/Documentation/usage/command_002dline-usage - https://phabricator.wikimedia.org/T259210 - https://www.mediawiki.org/wiki/Extension:Score/2021_security_advisory - https://tracker.debian.org/news/1249694/accepted-lilypond-2221-1-source-into-unstable/ - https://gitlab.com/lilypond/lilypond/-/merge_requests/1522 - https://lilypond.org/download.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ST5BLLQ4GDME3SN7UE5OMNE5GZE66X4Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K43PF
5OMNE5GZE66X4Y/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K43PF6VGFJNNGAPY57BW3VMEFFOSMRLF/
CVE ID: CVE-2020-17355 State: PUBLISHED Published: 2020-10-21T21:59:50 Last Updated: 2024-08-04T13:53:16.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DHCP packet which leads to an incorrect route being installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.arista.com/en/support/advisories-notices/security-advisories/11759-security-advisory-53
CVE ID: CVE-2020-17360 State: PUBLISHED Published: 2020-08-12T17:30:53 Last Updated: 2024-08-04T13:53:16.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of these checks, and out-of-bounds read/write. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://g
ed by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ReadyTalk/avian/issues - http://seclists.org/fulldisclosure/2020/Aug/8 - http://seclists.org/fulldisclosure/2020/Sep/11 - http://seclists.org/fulldisclosure/2020/Sep/14 - http://seclists.org/fulldisclosure/2020/Sep/13
CVE ID: CVE-2020-17361 State: PUBLISHED Published: 2020-08-12T17:31:40 Last Updated: 2024-08-04T13:53:16.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ReadyTalk/avian/issue
the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ReadyTalk/avian/issues - http://seclists.org/fulldisclosure/2020/Aug/10 - http://seclists.org/fulldisclosure/2020/Sep/11 - http://seclists.org/fulldisclosure/2020/Sep/14 - http://seclists.org/fulldisclosure/2020/Sep/13
CVE ID: CVE-2020-17362 State: PUBLISHED Published: 2020-08-12T21:16:33 Last Updated: 2024-08-04T13:53:17.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://themes.trac.wordpress.org/browser/nova-lite/1.3.9/readme.txt?rev=134076
CVE ID: CVE-2020-17363 State: PUBLISHED Published: 2020-12-31T01:16:06 Last Updated: 2024-08-04T13:53:16.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. NOTE: this may overlap CVE-2020-25069. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/2020-08-12-cve-2020-17363-usvn-remote-code-execution/
CVE ID: CVE-2020-17364 State: PUBLISHED Published: 2020-08-05T14:37:50 Last Updated: 2024-08-04T13:53:17.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/ - https://github.com/usvn/usvn/compare/1.0.8...1.0.9
CVE ID: CVE-2020-17365 State: PUBLISHED Published: 2020-09-24T22:25:50 Last Updated: 2024-08-04T13:53:16.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. The vulnerability allows a local user to corrupt system files: a local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.pango.co/sec31944/ - https://cymptom.com/cve-2020-
nal Analyst Notes: - CVE Program Container: References: - https://www.pango.co/sec31944/ - https://cymptom.com/cve-2020-17365-hotspot-shield-vpn-new-privilege-escalation-vulnerability/2020/10/
CVE ID: CVE-2020-17366 State: PUBLISHED Published: 2020-08-05T21:07:33 Last Updated: 2024-08-04T13:53:17.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509 Certificate Revocation List files from the RPKI relying party's view. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NLnetLabs/routinator/issues/319 - https://github.com/NLnetLabs/routinator/releases/tag/v0.8.0
CVE ID: CVE-2020-17367 State: PUBLISHED Published: 2020-08-11T15:58:50 Last Updated: 2024-08-04T13:53:17.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to command injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/netblue30/firejail - https://www.debian.org/security/2020/dsa-4742 - https://www.debian.org/security/2020/dsa-4743 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00036.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00033.html - https://lists.fedoraproject.org/archives/list/pac
- https://lists.debian.org/debian-lts-announce/2020/08/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W66IR5YT4KG464SKEMQN2NP2LGATGEGS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFXN3JJG4DIMN4TAHOTKFMS7SGM4EOTR/ - https://security.gentoo.org/glsa/202101-02
CVE ID: CVE-2020-17368 State: PUBLISHED Published: 2020-08-11T15:59:48 Last Updated: 2024-08-04T13:53:17.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/netblue30/firejail/ - https://www.debian.org/security/2020/dsa-4742 - https://www.debian.org/security/2020/dsa-4743 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00036.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00033.html - https://lists.fedoraproject.org/arch
sg00036.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W66IR5YT4KG464SKEMQN2NP2LGATGEGS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFXN3JJG4DIMN4TAHOTKFMS7SGM4EOTR/ - https://security.gentoo.org/glsa/202101-02
CVE ID: CVE-2020-17372 State: PUBLISHED Published: 2020-08-12T12:24:57 Last Updated: 2024-08-04T13:53:16.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 10.1.0 (Q3 2020) allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://support.sugarcrm.com/Resources/Security/ - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-025 - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-026 - http://seclists.org/fulldisclosure/2020/Aug/7 - http://packetstormsecurity.com/files/158847/SugarCRM-Cross-Site-Scripting.html
CVE ID: CVE-2020-17373 State: PUBLISHED Published: 2020-08-12T12:28:00 Last Updated: 2024-08-04T13:53:16.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2020/Aug/9 - http://packetstormsecurity.com/files/158848/SugarCRM-SQL-Injection.html - https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-051/
CVE ID: CVE-2020-17376 State: PUBLISHED Published: 2020-08-26T18:45:28 Last Updated: 2024-08-04T13:53:16.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths as host devices previously referenced by the virtual machine on the source host. This can include block devices that map to different Cinder volumes at the destination than at the source. Only deployments allowing host-based connectio
at map to different Cinder volumes at the destination than at the source. Only deployments allowing host-based connections (for instance, root and ephemeral devices) are affected. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1890501 - https://security.openstack.org/ossa/OSSA-2020-006.html - http://www.openwall.com/lists/oss-security/2020/08/25/4
CVE ID: CVE-2020-17380 State: PUBLISHED Published: 2021-01-30T05:38:01 Last Updated: 2024-08-04T13:53:16.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/
QEMU process on the host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1862167 - https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg01175.html - http://www.openwall.com/lists/oss-security/2021/03/09/1 - https://security.netapp.com/advisory/ntap-20210312-0003/ - https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html
CVE ID: CVE-2020-17381 State: PUBLISHED Published: 2020-10-21T00:00:00 Last Updated: 2024-08-04T13:53:16.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/an0ry/advisories/blob/main/CVE-2020-17381.md - https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-17381.md
CVE ID: CVE-2020-17382 State: PUBLISHED Published: 2020-10-02T08:20:11 Last Updated: 2024-08-04T13:53:17.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054). Additional Analyst Notes: - CVE Program Container: References: - https://us.msi.com/support/download/vga - http://packetstormsecurity.com/files/159315/MSI-Ambient-Link-Driver-1.0.0.8-Privilege-Escalation.html - https://www.coresecurity.com/core-labs/advisories/msi-ambient-link-multiple-vulnerabilities
CVE ID: CVE-2020-17383 State: PUBLISHED Published: 2022-01-24T19:08:43 Last Updated: 2024-08-04T13:53:16.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the device's file system. This can be used to identify configuration settings, password hashes for built-in accounts, and the cleartext password for remote configuration of the device through the WebUI. Additional Analyst Notes: - CVE Program Container: References: - https://www.telosalliance.com/downloads?search=software-updates#downloadListing - https://sra.io/blog-post/ - https://sra.io/blo
www.telosalliance.com/downloads?search=software-updates#downloadListing - https://sra.io/blog-post/ - https://sra.io/blog/this-traversal-had-a-face-for-radio-cve-2020-17383/
CVE ID: CVE-2020-17384 State: PUBLISHED Published: 2020-08-25T07:35:18.103626Z Last Updated: 2025-05-08T09:12:49.923Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Cellopoint Products: CelloOS Problem Types: Remote Command Execution (RCE) Description: Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers can inject and remotely execute arbitrary command to manipulate the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-3845-be6bf-1.html
CVE ID: CVE-2020-17385 State: PUBLISHED Published: 2020-08-25T07:35:18.510246Z Last Updated: 2025-05-08T09:14:05.045Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Cellopoint Products: CelloOS Problem Types: Unauthenticated Arbitrary File Disclosure Description: Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-3846-7790c-1.html
CVE ID: CVE-2020-17386 State: PUBLISHED Published: 2020-08-25T07:35:18.925467Z Last Updated: 2025-05-08T09:15:14.444Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Cellopoint Products: CelloOS Problem Types: CWE-918 Description: Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can temper with the URL parameter and access arbitrary file on system. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-3847-c62ca-1.html
CVE ID: CVE-2020-17387 State: PUBLISHED Published: 2020-08-25T20:21:28 Last Updated: 2024-08-04T13:53:16.962Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Marvell Products: QConvergeConsole Problem Types: CWE-22 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the writeObjectToConfigFile method of the GWTTestServiceImpl class. The issue results from the lack of proper validation of a user-supplied path prior to
d of the GWTTestServiceImpl class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10565. Additional Analyst Notes: - CVE Program Container: References: - https://www.marvell.com/content/dam/marvell/en/public-collateral/fibre-channel/marvell-fibre-channel-security-advisory-2020-07.pdf - https://www.zerodayinitiative.com/advisories/ZDI-20-974/
CVE ID: CVE-2020-17388 State: PUBLISHED Published: 2020-08-25T20:21:28 Last Updated: 2024-08-04T13:53:17.028Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Marvell Products: QConvergeConsole Problem Types: CWE-749 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Tomcat configuration file. The issue results from the lack of proper restriction to the Tomcat admin console. An attacker can leverage this vulnerab
he issue results from the lack of proper restriction to the Tomcat admin console. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10799. Additional Analyst Notes: - CVE Program Container: References: - https://www.marvell.com/content/dam/marvell/en/public-collateral/fibre-channel/marvell-fibre-channel-security-advisory-2020-07.pdf - https://www.zerodayinitiative.com/advisories/ZDI-20-975/
CVE ID: CVE-2020-17389 State: PUBLISHED Published: 2020-08-25T20:21:29 Last Updated: 2024-08-04T13:53:17.042Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Marvell Products: QConvergeConsole Problem Types: CWE-22 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the decryptFile method of the GWTTestServiceImpl class. The issue results from the lack of proper validation of a user-supplied path prior to using it in
TestServiceImpl class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10502. Additional Analyst Notes: - CVE Program Container: References: - https://www.marvell.com/content/dam/marvell/en/public-collateral/fibre-channel/marvell-fibre-channel-security-advisory-2020-07.pdf - https://www.zerodayinitiative.com/advisories/ZDI-20-976/
CVE ID: CVE-2020-17390 State: PUBLISHED Published: 2020-08-25T20:20:49 Last Updated: 2024-08-04T13:53:16.481Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Parallels Products: Desktop Problem Types: CWE-125 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the hypervisor kernel extension. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an
e issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the hypervisor. Was ZDI-CAN-10030. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-20-1008/ - https://kb.parallels.com/en/125013
CVE ID: CVE-2020-17391 State: PUBLISHED Published: 2020-08-25T20:20:50 Last Updated: 2024-08-04T13:53:16.935Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Parallels Products: Desktop Problem Types: CWE-749 Description: This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handler for HOST_IOCTL_INIT_HYPERVISOR in the prl_hypervisor kext. The issue results from the exposure of dangerous method or function to the unpri
_HYPERVISOR in the prl_hypervisor kext. The issue results from the exposure of dangerous method or function to the unprivileged user. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel. Was ZDI-CAN-10518. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/en/125013 - https://www.zerodayinitiative.com/advisories/ZDI-20-1009/
CVE ID: CVE-2020-17392 State: PUBLISHED Published: 2020-08-25T20:20:50 Last Updated: 2024-08-04T13:53:17.087Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Parallels Products: Desktop Problem Types: CWE-822 Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handler for HOST_IOCTL_SET_KERNEL_SYMBOLS in the prl_hypervisor kext. The issue results from the lack of proper validation of a user-supplied value pr
NEL_SYMBOLS in the prl_hypervisor kext. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Was ZDI-CAN-10519. Additional Analyst Notes: - CVE Program Container: References: - https://kb.parallels.com/en/125013 - https://www.zerodayinitiative.com/advisories/ZDI-20-1010/