Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-20426 State: PUBLISHED Published: 2020-01-27T04:21:04 Last Updated: 2024-08-05T02:39:09.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function ldlm_cancel_hpreq_check, there is no lock_count bounds check. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.lustre.org/Lustre_2.12.3_Changelog - http://lustre.org/ - https://jira.whamcloud.com/browse/LU-12614 - https://review.whamcloud.com/#/c/36107/
CVE ID: CVE-2019-20427 State: PUBLISHED Published: 2020-01-27T04:20:55 Last Updated: 2024-08-05T02:39:10.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between req_capsule_get_size and tgt_brw_write leads to a tgt_shortio2pages integer signedness error. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.lustre.org/Lustre_2.12.3_Changelog - http://lustre.org/ - https://jira.whamcloud.com/browse/LU-12600 - https://review.whamcloud.com/#
stre_2.12.3_Changelog - http://lustre.org/ - https://jira.whamcloud.com/browse/LU-12600 - https://review.whamcloud.com/#/c/35867/
CVE ID: CVE-2019-20428 State: PUBLISHED Published: 2020-01-27T04:20:43 Last Updated: 2024-08-05T02:39:09.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sent by a client. The ldl_request_cancel function mishandles a large lock_count parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.lustre.org/Lustre_2.12.3_Changelog - http://lustre.org/ - https://jira.whamcloud.com/browse/LU-12603 - https://review.whamcloud.com/#/c/36108/
CVE ID: CVE-2019-20429 State: PUBLISHED Published: 2020-01-27T04:20:23 Last Updated: 2024-08-05T02:39:10.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the lack of validation for specific fields of packets sent by a client. This is caused by interaction between sptlrpc_svc_unwrap_request and lustre_msg_hdr_size_v2. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.lustre.org/Lustre_2.12.3_Changelog - http://lustre.org/ - https://jira.whamcloud.com/browse/LU-12590 - https://review.whamcloud.com/#/c/36119/
CVE ID: CVE-2019-20430 State: PUBLISHED Published: 2020-01-27T04:20:09 Last Updated: 2024-08-05T02:39:09.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.lustre.org/Lustre_2.12.3_Changelog - http://lustre.org/ - https://jira.whamcloud.com/browse/LU-12602 - https://review.whamcloud.com/#/c/36208/
CVE ID: CVE-2019-20431 State: PUBLISHED Published: 2020-01-27T04:19:58 Last Updated: 2024-08-05T02:39:09.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osd_bufs_get in the osd_ldiskfs module does not validate a certain length value. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.lustre.org/Lustre_2.12.3_Changelog - http://lustre.org/ - https://jira.whamcloud.com/browse/LU-12612 - https://review.whamcloud.com/#/c/36273/
CVE ID: CVE-2019-20432 State: PUBLISHED Published: 2020-01-27T04:19:42 Last Updated: 2024-08-05T02:39:09.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. mdt_file_secctx_unpack does not validate the value of name_size derived from req_capsule_get_size. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.lustre.org/Lustre_2.12.3_Changelog - http://lustre.org/ - https://jira.whamcloud.com/browse/LU-12604 - https://review.whamcloud.com/#/c/35868/
CVE ID: CVE-2019-20433 State: PUBLISHED Published: 2020-01-27T14:03:26 Last Updated: 2024-08-05T02:39:09.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://aspell.net/buffer-overread-ucs.txt
CVE ID: CVE-2019-20434 State: PUBLISHED Published: 2020-01-27T23:38:54 Last Updated: 2024-08-05T02:39:09.999Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Datasource creation page of the Management Console. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0616 - https://github.com/cybersecurityworks/Disclosed/issues/17 - https://cybersecurityworks.com/zerodays/cve-2019-20434-wso2.html
CVE ID: CVE-2019-20435 State: PUBLISHED Published: 2020-01-27T23:38:34 Last Updated: 2024-08-05T02:39:10.020Z Severity: LOW (CVSS 3.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0633 - https://github.com/cybersecurityworks/Disclosed/issues/18 - https://cybersecurityworks.com/
ty+Advisory+WSO2-2019-0633 - https://github.com/cybersecurityworks/Disclosed/issues/18 - https://cybersecurityworks.com/zerodays/cve-2019-20435-wso2.html
CVE ID: CVE-2019-20436 State: PUBLISHED Published: 2020-01-27T23:36:25 Last Updated: 2024-08-05T02:39:09.966Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. If there is a claim dialect configured with an XSS payload in the dialect URI, and a user picks up this dialect's URI and adds it as the service provider claim dialect while configuring the service provider, that payload gets executed. The attacker also needs to have privileges to log in to the management console, and to add and configure clai
executed. The attacker also needs to have privileges to log in to the management console, and to add and configure claim dialects. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0634 - https://github.com/cybersecurityworks/Disclosed/issues/19 - https://cybersecurityworks.com/zerodays/cve-2019-20436-wso2.html
CVE ID: CVE-2019-20437 State: PUBLISHED Published: 2020-01-27T23:38:16 Last Updated: 2024-08-05T02:39:10.001Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. When a custom claim dialect with an XSS payload is configured in the identity provider basic claim configuration, that payload gets executed, if a user picks up that dialect's URI as the provisioning claim in the advanced claim configuration of the same Identity Provider. The attacker also needs to have privileges to log in to the management c
im configuration of the same Identity Provider. The attacker also needs to have privileges to log in to the management console, and to add and update identity provider configurations. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0635 - https://github.com/cybersecurityworks/Disclosed/issues/20 - https://cybersecurityworks.com/zerodays/cve-2019-20437-wso2.html
CVE ID: CVE-2019-20438 State: PUBLISHED Published: 2020-01-27T23:37:59 Last Updated: 2024-08-05T02:39:10.044Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting (XSS) vulnerability has been identified in the inline API documentation editor page of the API Publisher. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0645 - https://github.com/cybersecurityworks/Disclosed/issues/22 - https://cybersecurityworks.com/zerodays/cve-2019-20438-wso2.ht
tps://github.com/cybersecurityworks/Disclosed/issues/22 - https://cybersecurityworks.com/zerodays/cve-2019-20438-wso2.html
CVE ID: CVE-2019-20439 State: PUBLISHED Published: 2020-01-27T23:37:39 Last Updated: 2024-08-05T02:39:10.017Z Severity: LOW (CVSS 3.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in defining a scope in the "manage the API" page of the API Publisher. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0644 - https://github.com/cybersecurityworks/Disclosed/issues/21 - https://cybersecurityworks.com/zerodays/cve-2019-20439-ws
- https://github.com/cybersecurityworks/Disclosed/issues/21 - https://cybersecurityworks.com/zerodays/cve-2019-20439-wso2.html
CVE ID: CVE-2019-20440 State: PUBLISHED Published: 2020-01-27T23:37:26 Last Updated: 2024-08-05T02:39:09.883Z Severity: LOW (CVSS 3.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the update API documentation feature of the API Publisher. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0646 - https://github.com/cybersecurityworks/Disclosed/issues/24 - https://cybersecurityworks.com/zerodays/cve-2019-20440-wso2.html
CVE ID: CVE-2019-20441 State: PUBLISHED Published: 2020-01-27T23:37:15 Last Updated: 2024-08-05T02:39:09.862Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0. A potential Stored Cross-Site Scripting (XSS) vulnerability has been identified in the 'implement phase' of the API Publisher. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0647 - https://github.com/cybersecurityworks/Disclosed/issues/23 - https://cybersecurityworks.com/zerodays/cve-2019-20441-wso2.html
CVE ID: CVE-2019-20442 State: PUBLISHED Published: 2020-01-27T23:36:56 Last Updated: 2024-08-05T02:39:09.915Z Severity: LOW (CVSS 3.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in roleToAuthorize has been identified in the registry UI. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636 - https://github.com/cybersecurityworks/Disclosed/issues/2
cs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636 - https://github.com/cybersecurityworks/Disclosed/issues/25 - https://cybersecurityworks.com/zerodays/cve-2019-20442-wso2.html
CVE ID: CVE-2019-20443 State: PUBLISHED Published: 2020-01-27T23:36:43 Last Updated: 2024-08-05T02:39:09.999Z Severity: LOW (CVSS 3.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting (XSS) vulnerability in mediaType has been identified in the registry UI. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2019-0636 - https://github.com/cybersecurityworks/Disclosed/issues/26 - ht
2.com/display/Security/Security+Advisory+WSO2-2019-0636 - https://github.com/cybersecurityworks/Disclosed/issues/26 - https://cybersecurityworks.com/zerodays/cve-2019-20443-wso2.html
CVE ID: CVE-2019-20444 State: PUBLISHED Published: 2020-01-29T20:33:17.000Z Last Updated: 2025-07-01T18:01:08.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/netty/netty/issues/9866 - https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final - https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E -
/lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/rff210a24f3a924829790e69eaefa84820902b7b31f17c3bf2def9114@%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/ra9fbfe7d4830ae675bf34c7c0f8c22fc8a4099f65706c1bc4f54c593@%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r96e08f929234e8ba1ef4a93a0fd2870f535a1f9ab628fabc46115986@%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r804895eedd72c9ec67898286eb
5a1f9ab628fabc46115986@%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r804895eedd72c9ec67898286eb185e04df852b0dd5fe53cf5b6138f9@%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rce71d33747010d32d31d90f5d737dae26291d96552f513a266c92fbb@%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rfb55f245b08d8a6ec0fb4dc159022227cd22de34c4419c2fbb18802b@%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/ra2ace4bcb5cf487f72cbcbfa0f8cc08e755ec2b93d7e69f276148b08@%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r36fcf538b28f2029e8b4f6b9a772f3b107913a78f09b095c5b153a62@%3Cissues.z
ache.org%3E - https://lists.apache.org/thread.html/r36fcf538b28f2029e8b4f6b9a772f3b107913a78f09b095c5b153a62@%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r91e0fa345c86c128b75a4a791b4b503b53173ff4c13049ac7129d319@%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r310d2ce22304d5298ff87f10134f918c87919b452734f9841d95682d@%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r9b20cdac704cf9a583400350e2d5b576fa8417c18ddb961201676c60@%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r640eb9b3213058a963e18291f903fc1584e577f60035f941e32f760a@%3Cissues.zookeeper.apache.org%3E - https://lists.apache.o
tml/r640eb9b3213058a963e18291f903fc1584e577f60035f941e32f760a@%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r059b042bca47be53ff8a51fd04d95eb01bb683f1afa209db136e8cb7@%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r489886fe72a98768eed665474cba13bad8d6fe0654f24987706636c5@%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r34912a9b1a5c269a77b8be94ef6fb6d1e9b3c69129719dc00f01cf0b@%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r0f5e72d5f69b4720dfe64fcbc2da9afae949ed1e9cbffa84bb7d92d7@%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r1fcccf8bdb3531c28bc9aa605a6a1bea7e68cef6fc
notifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r1fcccf8bdb3531c28bc9aa605a6a1bea7e68cef6fc12e01faafb2fb5@%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r819aaeb9944bdcfca438dcc51f05650dc728daf64dfd7d774fc2499b@%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/rb84c57670ec48ef23f4d07973b7fa69f629b8e7fcfb48874362feb6f@%3Ccommits.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r6945f3c346b7af89bbd3526a7c9b705b1e3569070ebcd0964bcedd7d@%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/r4c675b2d0cc2a5e506b11ee10d60a378859ee340aca052e4c7ef4749@%3Cnotifications.zookeeper.apache.org%3
apache.org/thread.html/r4c675b2d0cc2a5e506b11ee10d60a378859ee340aca052e4c7ef4749@%3Cnotifications.zookeeper.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0497 - https://lists.apache.org/thread.html/r959474dcf7f88565ed89f6252ca5a274419006cb71348f14764b183d@%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/rc7eb5634b71d284483e58665b22bf274a69bd184d9bd7ede52015d91@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r90030b0117490caed526e57271bf4d7f9b012091ac5083c895d16543@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/re0b78a3d0a4ba2cf9f4e14e1d05040bde9051d5c78071177186336c9@%3Ccommon-issues.hadoop.apach
s://lists.apache.org/thread.html/re0b78a3d0a4ba2cf9f4e14e1d05040bde9051d5c78071177186336c9@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/02/msg00017.html - https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html - https://lists.apache.org/thread.html/re78eaef7d01ad65c370df30e45c686fffff00b37f7bfd78b26a08762@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r0c3d49bfdbc62fd3915676433cc5899c5506d06da1c552ef1b7923a5@%3Ccommon-issues.hadoop.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0601 - https://access.redhat.com/errata/RHSA-2020:0606 - https://access.redhat.com/errata/RHSA-2020:0605 - https://acc
0:0601 - https://access.redhat.com/errata/RHSA-2020:0606 - https://access.redhat.com/errata/RHSA-2020:0605 - https://access.redhat.com/errata/RHSA-2020:0567 - https://lists.apache.org/thread.html/rf2bf8e2eb0a03227f5bc100b544113f8cafea01e887bb068e8d1fa41@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/rb3361f6c6a5f834ad3db5e998c352760d393c0891b8d3bea90baa836@%3Ccommon-issues.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r86befa74c5cd1482c711134104aec339bf7ae879f2c4437d7ec477d4@%3Ccommon-commits.hadoop.apache.org%3E - https://lists.apache.org/thread.html/rdd5d243a5f8ed8b83c0104e321aa420e5e98792a95749e3c9a54c0b9@%3Ccommon-commits.hadoop.apache.org%3E -
pache.org/thread.html/rdd5d243a5f8ed8b83c0104e321aa420e5e98792a95749e3c9a54c0b9@%3Ccommon-commits.hadoop.apache.org%3E - https://lists.apache.org/thread.html/rcb2c59428f34d4757702f9ae739a8795bda7bea97b857e708a9c62c6@%3Ccommon-commits.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r8402d67fdfe9cf169f859d52a7670b28a08eff31e54b522cc1432532@%3Ccommon-issues.hadoop.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0806 - https://access.redhat.com/errata/RHSA-2020:0811 - https://access.redhat.com/errata/RHSA-2020:0804 - https://access.redhat.com/errata/RHSA-2020:0805 - https://lists.apache.org/thread.html/r205937c85817a911b0c72655c2377e7a2c9322d6ef6ce1b118d34d8d@%3Cdev.geode.
2020:0805 - https://lists.apache.org/thread.html/r205937c85817a911b0c72655c2377e7a2c9322d6ef6ce1b118d34d8d@%3Cdev.geode.apache.org%3E - https://lists.apache.org/thread.html/ra1a71b576a45426af5ee65255be9596ff3181a342f4ba73b800db78f@%3Cdev.geode.apache.org%3E - https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/09/msg00004.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00003.html - https://lists.apache.org/thread.html/r
00004.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00003.html - https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7@%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f@%3Cdev.flink.apache.org%3E - https://usn.ubuntu.com/4532-1/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46/ - https://lists.apache.org/thread.html/r0aa8b28e76ec01c697b15e161e6797e88fc8d406ed762e253401106e@%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372
e253401106e@%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4@%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2@%3Ccommits.pulsar.apache.org%3E - https://www.debian.org/security/2021/dsa-4885 - https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e
org/security/2021/dsa-4885 - https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/r2f2989b7815d809ff3fda8ce330f553e5f133505afd04ffbc135f35f@%3Cissues.spark.apache.org%3E - https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-20444/5.0.0.Alpha1/exploit
CVE ID: CVE-2019-20445 State: PUBLISHED Published: 2020-01-29T20:33:03 Last Updated: 2024-08-05T02:39:10.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final - https://github.com/netty/netty/issues/9861 - https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/r70b1ff22