Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-36190 State: PUBLISHED Published: 2021-01-12T19:38:20 Last Updated: 2024-08-04T17:23:09.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sferik/rails_admin/blob/master/README.md - https://github.com/sferik/rails_admin/commit/d72090ec6a07c3b9b7b48ab50f3d405f91ff4375 - https://github.com/sferik/rails_admin/compare/v1.4.2...v1.4.3
CVE ID: CVE-2020-36191 State: PUBLISHED Published: 2021-01-13T03:36:09 Last Updated: 2024-08-04T17:23:09.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jupyterhub/jupyterhub/issues/3304 - https://github.com/jupyterhub/jupyterhub/releases
CVE ID: CVE-2020-36192 State: PUBLISHED Published: 2021-01-18T19:05:03 Last Updated: 2024-08-04T17:23:09.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private Project), if they are attached to an existing Changeset. The information is visible on the view.php page, as well as on the list.php page (a pop-up on the Affected Issues id hyperlink). Additionally, if the attacker has "Update threshold" in the plugin's configuration (set to the "updater" access level by default), then they can l
ker has "Update threshold" in the plugin's configuration (set to the "updater" access level by default), then they can link any Issue to a Changeset by entering the Issue's Id, even if they do not have access to it. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mantisbt-plugins/source-integration/issues/344
CVE ID: CVE-2020-36193 State: PUBLISHED Published: 2021-01-18T19:24:18.000Z Last Updated: 2025-10-21T23:35:29.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pear/Archive_Tar/commit/cde460582ff389404b5b3ccb59374e9b389de916 - https://www.drupal.org/sa-core-2021-001 - https://lists.debian.org/debian-lts-announce/2021/01/msg00018.html - https://security.gentoo.org/glsa/202101-23 - https://lists.fedoraprojec
.org/debian-lts-announce/2021/01/msg00018.html - https://security.gentoo.org/glsa/202101-23 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKD5WEFA4WT6AVTMRAYBNXZNLWZHM7FH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOZNK4FIIV7FSFCJNNFWMJZTTV7NFJV2/ - https://lists.debian.org/debian-lts-announce/2021/04/msg00007.html - https://www.debian.org/security/2021/dsa-4894 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
AOWHD6RDITDRPHFW7WY6BS3V5N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/
CVE ID: CVE-2020-36194 State: PUBLISHED Published: 2021-07-01T02:00:17.242657Z Last Updated: 2024-09-17T02:01:31.559Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-79 Description: An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.2.1566 Build 20210202. QNAP Systems Inc. QuTS hero versions prior to h4.5.2.1638 build 20210414. This issue does not affect: QNAP Systems Inc. QTS 4.5.3. Additional Analyst Notes: - CVE Program Con
638 build 20210414. This issue does not affect: QNAP Systems Inc. QTS 4.5.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-21-32
CVE ID: CVE-2020-36195 State: PUBLISHED Published: 2021-04-17T03:50:13.274444Z Last Updated: 2024-09-16T17:28:07.500Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: QTS, Media Streaming add-on, Multimedia Console Problem Types: CWE-20, CWE-89, CWE-943 Description: An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-
rability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have also fixed this vulnerability in the following versions of QTS 4.3.3 and QTS 4.3.6, respectively: QTS 4.3.3.1624 Build 20210416 or later QTS 4.3.6.1620 Build 20210322 or later Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-21-11
CVE ID: CVE-2020-36196 State: PUBLISHED Published: 2021-07-01T02:00:18.925660Z Last Updated: 2024-09-16T19:30:06.275Z Vendors: QNAP Systems Inc. Products: QuLog Center Problem Types: CWE-80 Description: A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-21-30
CVE ID: CVE-2020-36197 State: PUBLISHED Published: 2021-05-13T02:55:12.525891Z Last Updated: 2024-09-17T01:01:30.720Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: QNAP Systems Inc. Products: Music Station Problem Types: CWE-284 Description: An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6;
e affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6; versions prior to 5.1.14 on QTS 4.3.3; versions prior to 5.3.16 on QuTS hero h4.5.2; versions prior to 5.3.16 on QuTScloud c4.5.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-21-08 - https://www.zerodayinitiative.com/advisories/ZDI-21-591/ - http://packetstormsecurity.com/files/162849/QNAP-MusicStation-MalwareRemover-File-Upload-Command-Injection.html
CVE ID: CVE-2020-36198 State: PUBLISHED Published: 2021-05-13T02:55:13.209368Z Last Updated: 2024-09-17T01:10:58.778Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: Malware Remover Problem Types: CWE-77, CWE-78 Description: A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect: QNAP Systems Inc. Malware Remover 3.x. Additional Analyst Notes: - CVE Program Container: References: - https://www.q
t: QNAP Systems Inc. Malware Remover 3.x. Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/zh-tw/security-advisory/qsa-21-16 - https://www.zerodayinitiative.com/advisories/ZDI-21-592/ - http://packetstormsecurity.com/files/162849/QNAP-MusicStation-MalwareRemover-File-Upload-Command-Injection.html
CVE ID: CVE-2020-36199 State: PUBLISHED Published: 2021-01-21T21:20:28 Last Updated: 2024-08-04T17:23:09.537Z Vendors: n/a Products: Kaspersky TinyCheck Problem Types: Arbitrary Code execution Description: TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/KasperskyLab/TinyCheck/security/advisories/GHSA-j2vj-mhr6-795m
CVE ID: CVE-2020-36200 State: PUBLISHED Published: 2021-01-21T21:23:00 Last Updated: 2024-08-04T17:23:09.508Z Vendors: n/a Products: Kaspersky TinyCheck Problem Types: Server-Side Request Forgery (SSRF) Description: TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/KasperskyLab/TinyCheck/security/advisories/GHSA-gqpw-3669-6w5h
CVE ID: CVE-2020-36201 State: PUBLISHED Published: 2021-01-21T20:39:08 Last Updated: 2024-08-04T17:23:09.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20L_for_ConnectKey-1.pdf
CVE ID: CVE-2020-36202 State: PUBLISHED Published: 2021-01-22T09:07:50 Last Updated: 2024-08-04T17:23:09.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0093.html
CVE ID: CVE-2020-36203 State: PUBLISHED Published: 2021-01-22T09:07:40 Last Updated: 2024-08-04T17:23:09.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0094.html
CVE ID: CVE-2020-36204 State: PUBLISHED Published: 2021-01-22T09:07:26 Last Updated: 2024-08-04T17:23:09.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0096.html
CVE ID: CVE-2020-36205 State: PUBLISHED Published: 2021-01-22T09:07:13 Last Updated: 2024-08-04T17:23:09.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0097.html
CVE ID: CVE-2020-36206 State: PUBLISHED Published: 2021-01-22T09:06:59 Last Updated: 2024-08-04T17:23:09.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0098.html
CVE ID: CVE-2020-36207 State: PUBLISHED Published: 2021-01-22T09:06:46 Last Updated: 2024-08-04T17:23:09.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0099.html
CVE ID: CVE-2020-36208 State: PUBLISHED Published: 2021-01-22T09:06:15 Last Updated: 2024-08-04T17:23:09.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sync type, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0101.html
CVE ID: CVE-2020-36209 State: PUBLISHED Published: 2021-01-22T09:06:01 Last Updated: 2024-08-04T17:23:09.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the late-static crate before 0.4.0 for Rust. Because Sync is implemented for LateStatic with T: Send, a data race can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0102.html
CVE ID: CVE-2020-36210 State: PUBLISHED Published: 2021-01-22T09:05:45 Last Updated: 2024-08-04T17:23:09.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0103.html
CVE ID: CVE-2020-36211 State: PUBLISHED Published: 2021-01-22T09:05:33 Last Updated: 2024-08-04T17:23:09.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0104.html
CVE ID: CVE-2020-36212 State: PUBLISHED Published: 2021-01-22T09:05:21 Last Updated: 2024-08-04T17:23:09.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the abi_stable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double drop. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0105.html
CVE ID: CVE-2020-36213 State: PUBLISHED Published: 2021-01-22T09:05:10 Last Updated: 2024-08-04T17:23:09.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the abi_stable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string, violating soundness. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0105.html
CVE ID: CVE-2020-36214 State: PUBLISHED Published: 2021-01-22T09:05:01 Last Updated: 2024-08-04T17:23:09.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust. Because a non-Send type can be sent to a different thread, a data race can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0106.html
CVE ID: CVE-2020-36215 State: PUBLISHED Published: 2021-01-22T09:04:49 Last Updated: 2024-08-04T17:23:09.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0107.html
CVE ID: CVE-2020-36216 State: PUBLISHED Published: 2021-01-22T09:04:39 Last Updated: 2024-08-04T17:23:09.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0108.html
CVE ID: CVE-2020-36217 State: PUBLISHED Published: 2021-01-22T09:04:27 Last Updated: 2024-08-04T17:23:09.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the may_queue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Send trait or Sync trait, memory corruption can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0111.html
CVE ID: CVE-2020-36218 State: PUBLISHED Published: 2021-01-22T09:04:13 Last Updated: 2024-08-04T17:23:09.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the buttplug crate before 1.0.4 for Rust. ButtplugFutureStateShared does not properly consider (!Send|!Sync) objects, leading to a data race. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0112.html
CVE ID: CVE-2020-36219 State: PUBLISHED Published: 2021-01-22T09:04:00 Last Updated: 2024-08-04T17:23:09.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync unconditionally, a data race can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0113.html
CVE ID: CVE-2020-36220 State: PUBLISHED Published: 2021-01-22T09:03:48 Last Updated: 2024-08-04T17:23:09.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer<T> omits a required T: Send bound, a data race and memory corruption can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0114.html
CVE ID: CVE-2020-36221 State: PUBLISHED Published: 2021-01-25T09:44:47 Last Updated: 2024-08-04T17:23:09.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck). Additional Analyst Notes: - CVE Program Container: References: - https://bugs.openldap.org/show_bug.cgi?id=9404 - https://git.openldap.org/openldap/openldap/-/commit/38ac838e4150c626bbfa0082b7e2cf3a2bb4df31 - https://bugs.openldap.org/show_bug.cgi?id=9424 - https://git.openldap.org/openldap/openldap/-/commit/58c1748e81c8
df31 - https://bugs.openldap.org/show_bug.cgi?id=9424 - https://git.openldap.org/openldap/openldap/-/commit/58c1748e81c843c5b6e61648d2a4d1d82b47e842 - https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57 - https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html - https://www.debian.org/security/2021/dsa-4845 - https://security.netapp.com/advisory/ntap-20210226-0002/ - https://support.apple.com/kb/HT212529 - https://support.apple.com/kb/HT212531 - https://support.apple.com/kb/HT212530 - http://seclists.org/fulldisclosure/2021/May/70 - http://seclists.org/fulldisclosure/2021/May/64 - http://seclists.org/fulldisclosure/2021/May/65 - https://lists.apache.org/threa
eclists.org/fulldisclosure/2021/May/64 - http://seclists.org/fulldisclosure/2021/May/65 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2020-36222 State: PUBLISHED Published: 2021-01-25T09:44:38 Last Updated: 2024-08-04T17:23:09.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57 - https://bugs.openldap.org/show_bug.cgi?id=9406 - https://git.openldap.org/openldap/openldap/-/commit/6ed057b5b728b50746c869bcc9c1f85d0bbbf6ed - https://git.openldap.org/openldap/openldap/-/commit/02dfc32d658fadc25e4040f78e36592f6e1e1ca0 -
6c869bcc9c1f85d0bbbf6ed - https://git.openldap.org/openldap/openldap/-/commit/02dfc32d658fadc25e4040f78e36592f6e1e1ca0 - https://bugs.openldap.org/show_bug.cgi?id=9407 - https://git.openldap.org/openldap/openldap/-/commit/6ed057b5b728b50746c869bcc9c1f85d0bbbf6ed.aa - https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html - https://www.debian.org/security/2021/dsa-4845 - https://security.netapp.com/advisory/ntap-20210226-0002/ - https://support.apple.com/kb/HT212529 - https://support.apple.com/kb/HT212531 - https://support.apple.com/kb/HT212530 - http://seclists.org/fulldisclosure/2021/May/70 - http://seclists.org/fulldisclosure/2021/May/64 - http://seclists.org/fulldisclosure/202
org/fulldisclosure/2021/May/70 - http://seclists.org/fulldisclosure/2021/May/64 - http://seclists.org/fulldisclosure/2021/May/65 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2020-36223 State: PUBLISHED Published: 2021-01-25T09:43:28 Last Updated: 2024-08-04T17:23:09.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57 - https://bugs.openldap.org/show_bug.cgi?id=9408 - https://git.openldap.org/openldap/openldap/-/commit/21981053a1195ae1555e23df4d9ac68d34ede9dd - https://lists.debian.org/debian-lts-announce/2021/02/msg00
/openldap/-/commit/21981053a1195ae1555e23df4d9ac68d34ede9dd - https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html - https://www.debian.org/security/2021/dsa-4845 - https://security.netapp.com/advisory/ntap-20210226-0002/ - https://support.apple.com/kb/HT212529 - https://support.apple.com/kb/HT212531 - https://support.apple.com/kb/HT212530 - http://seclists.org/fulldisclosure/2021/May/70 - http://seclists.org/fulldisclosure/2021/May/64 - http://seclists.org/fulldisclosure/2021/May/65 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64
61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E