Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-14320 State: PUBLISHED Published: 2022-08-16T19:37:25 Last Updated: 2024-08-04T12:39:36.217Z Vendors: n/a Products: Moodle Problem Types: CWE-79 Description: In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=407392
CVE ID: CVE-2020-14321 State: PUBLISHED Published: 2022-08-16T00:00:00 Last Updated: 2024-08-04T12:39:36.437Z Vendors: n/a Products: Moodle Problem Types: CWE-863 Description: In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=407393
CVE ID: CVE-2020-14322 State: PUBLISHED Published: 2022-08-16T00:00:00 Last Updated: 2024-08-04T12:39:36.531Z Vendors: n/a Products: Moodle Problem Types: CWE-770 Description: In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=407394
CVE ID: CVE-2020-14323 State: PUBLISHED Published: 2020-10-29T00:00:00 Last Updated: 2024-08-04T12:39:36.466Z Vendors: n/a Products: Samba Problem Types: CWE-170 Description: A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1891685 - https://www.samba.org/samba/security/CVE-2020-14323.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00008.html - http://lists.opensuse.org/
020-14323.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00012.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JE2M4FE3N3EDXVG4UKSVFPL7SQUGFFDP/ - https://security.netapp.com/advisory/ntap-20201103-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6HM73N4NEGFW5GIJJGGP6ZZBS6GTXPB/ - https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html - https://security.gentoo.org/glsa/202012-24 - https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html
CVE ID: CVE-2020-14324 State: PUBLISHED Published: 2020-08-11T13:19:47 Last Updated: 2024-08-04T12:39:36.479Z Vendors: n/a Products: CloudForms Problem Types: OS Command Injection Description: A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker while setuping conversion host through Infrastructure Migration Solution. This flaw allows attacker to execute arbitrary commands on CloudForms server. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1855713 - https://access.redhat.com/security/cve/c
Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1855713 - https://access.redhat.com/security/cve/cve-2020-14324
CVE ID: CVE-2020-14325 State: PUBLISHED Published: 2020-08-11T12:49:44 Last Updated: 2024-08-04T12:39:36.480Z Vendors: n/a Products: CloudForms Problem Types: Improper Authorization Description: Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group of EvmGroup-super_administrator, an attacker can perform any API request as a super administrator. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1855739 - https://access.redhat.com/security/cve/cve-2020
ner: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1855739 - https://access.redhat.com/security/cve/cve-2020-14325
CVE ID: CVE-2020-14326 State: PUBLISHED Published: 2021-06-02T11:23:23 Last Updated: 2024-08-04T12:39:36.403Z Vendors: n/a Products: RESTEasy Problem Types: CWE-400 Description: A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1855826 - https://security.netapp.com/advisory/ntap-20210713-0001/
CVE ID: CVE-2020-14327 State: PUBLISHED Published: 2021-05-27T19:44:38 Last Updated: 2024-08-04T12:39:36.243Z Vendors: n/a Products: Tower Problem Types: CWE-918 Description: A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by supplying a URL that could lead to the server processing it. This flaw leads to the connection to internal services or the exposure of additional internal services by abusing the test feature of lookup credentials to forge HTTP/HTTPS requests from the server and retrieving the results of the response. Additional Analyst Notes: - CVE Program Container: References:
m the server and retrieving the results of the response. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1856785
CVE ID: CVE-2020-14328 State: PUBLISHED Published: 2021-05-27T19:44:43 Last Updated: 2024-08-04T12:39:36.275Z Vendors: n/a Products: Tower Problem Types: CWE-918 Description: A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplying a URL which could lead to the server processing it connecting to internal services or exposing additional internal services and more particularly retrieving full details in case of error. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1856786
CVE ID: CVE-2020-14329 State: PUBLISHED Published: 2021-05-27T19:44:48 Last Updated: 2024-08-04T12:39:36.226Z Vendors: n/a Products: Tower Problem Types: CWE-200 Description: A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint. This flaw allows users from other organizations in the system to retrieve any label from the organization and also disclose organization names. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1856787
CVE ID: CVE-2020-14330 State: PUBLISHED Published: 2020-09-11T00:00:00 Last Updated: 2024-08-04T12:39:36.412Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Ansible Problem Types: CWE-532 Description: An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https:/
this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/issues/68400 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330 - https://www.debian.org/security/2021/dsa-4950
CVE ID: CVE-2020-14331 State: PUBLISHED Published: 2020-09-15T18:51:10 Last Updated: 2024-08-04T12:39:36.257Z Vendors: n/a Products: Linux Kernel Problem Types: CWE-787 Description: A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Co
lity is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/07/28/2 - https://lists.openwall.net/linux-kernel/2020/07/29/234 - https://bugzilla.redhat.com/show_bug.cgi?id=1858679 - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-14332 State: PUBLISHED Published: 2020-09-11T17:59:30 Last Updated: 2024-08-04T12:39:36.318Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Ansible Problem Types: CWE-117 Description: A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ansible/ansible/pull/71033 - https://bugzilla.redhat.com/show_b
CVE Program Container: References: - https://github.com/ansible/ansible/pull/71033 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332 - https://www.debian.org/security/2021/dsa-4950
CVE ID: CVE-2020-14333 State: PUBLISHED Published: 2020-08-18T13:13:26 Last Updated: 2024-08-04T12:39:36.268Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: The ovirt Project Products: ovirt-engine Problem Types: CWE-79 Description: A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This flaw allows an attacker to leverage a phishing attack, steal an unsuspecting user's cookies or other confidential information, or impersonate them within the application's context. Additional Analyst Notes: - CVE Program Container: R
information, or impersonate them within the application's context. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14333
CVE ID: CVE-2020-14334 State: PUBLISHED Published: 2020-07-31T12:41:16 Last Updated: 2024-08-04T12:39:36.426Z Vendors: n/a Products: Red Hat Satellite Problem Types: CWE-522 Description: A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files. These cache credentials could help attacker to gain complete control of the Satellite instance. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1858284
CVE ID: CVE-2020-14335 State: PUBLISHED Published: 2021-06-02T11:52:56 Last Updated: 2024-08-04T12:39:36.395Z Vendors: n/a Products: Red Hat Satellite Problem Types: CWE-200 Description: A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1858302
CVE ID: CVE-2020-14336 State: PUBLISHED Published: 2021-06-02T11:48:44 Last Updated: 2024-08-04T12:39:36.450Z Vendors: n/a Products: Openshift Problem Types: CWE-770 Description: A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network packets. This flaw allows an attacker to cause a denial of service attack on an OpenShift Container Platform cluster if they can deploy pods. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1858981
CVE ID: CVE-2020-14337 State: PUBLISHED Published: 2020-07-31T12:42:55 Last Updated: 2024-08-04T12:39:36.520Z Vendors: n/a Products: Ansible Tower Problem Types: CWE-209 Description: A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages from the default organization and verify existing usernames. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1859139
CVE ID: CVE-2020-14338 State: PUBLISHED Published: 2020-09-17T14:06:25 Last Updated: 2024-08-04T12:39:36.528Z Vendors: n/a Products: Wildfly Problem Types: CWE-20 Description: A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected OpenJDK, and uses a similar code. This flaw affects all Xerces JBoss versions before 2.12.0.SP3. Additional Analyst Notes: - CVE Program Container: References: - https://bug
ll Xerces JBoss versions before 2.12.0.SP3. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1860054 - https://lists.apache.org/thread.html/rf96c5afb26b596b4b97883aa90b6c0b0fc4c26aaeea7123c21912103%40%3Cj-users.xerces.apache.org%3E
CVE ID: CVE-2020-14339 State: PUBLISHED Published: 2020-12-03T00:00:00 Last Updated: 2024-08-04T12:39:36.530Z Vendors: n/a Products: libvirt Problem Types: CWE-772 Description: A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of their standard permissions, potentially causing serious damage to the host operating system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Not
threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1860069 - https://security.gentoo.org/glsa/202101-22 - https://security.gentoo.org/glsa/202210-06
CVE ID: CVE-2020-14340 State: PUBLISHED Published: 2021-06-02T12:04:28 Last Updated: 2024-08-04T12:39:36.533Z Vendors: n/a Products: XNIO Problem Types: CWE-400 Description: A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1860218 - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-14341 State: PUBLISHED Published: 2021-01-12T14:23:31 Last Updated: 2024-08-04T12:39:36.428Z Vendors: Red Hat Products: Red Hat Single Sign-On Problem Types: CWE-385 Description: The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the user's choosing, and originating from the RHSSO installation. By observing differences in the timings of these scans, an attacker may glean information about hosts and ports which they do not have access to scan directly. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.re
o not have access to scan directly. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1860138
CVE ID: CVE-2020-14342 State: PUBLISHED Published: 2020-09-09T11:13:35 Last Updated: 2024-08-04T12:39:36.529Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: samba Products: cifs-utils Problem Types: CWE-77 Description: It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://lists.samba.org/archive/samba-technical/2020-September/135747.html - https://bugzilla.re
ontainer: References: - https://lists.samba.org/archive/samba-technical/2020-September/135747.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14342 - https://security.gentoo.org/glsa/202009-16 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00109.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DUMRICFXJVCBBOSKZSKT3HFVQM6VPJU3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBNFSTJOQWVPFZAUJNNMAPY45PW5RTTE/
CVE ID: CVE-2020-14343 State: PUBLISHED Published: 2021-02-09T00:00:00 Last Updated: 2024-08-04T12:39:36.530Z Vendors: n/a Products: PyYAML Problem Types: CWE-20 Description: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Additional Analyst Notes: - CVE
python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yaml/pyyaml/issues/420 - https://bugzilla.redhat.com/show_bug.cgi?id=1860466 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://github.com/SeldonIO/seldon-core/issues/2252
CVE ID: CVE-2020-14344 State: PUBLISHED Published: 2020-08-05T13:08:33 Last Updated: 2024-08-04T12:39:36.520Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: The X11 Project Products: libX11 Problem Types: CWE-190 Description: An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux. Additional Analyst Notes: - CVE Program Container: References: - https://lists.x.org/archives/xorg-ann
Enterprise Linux. Additional Analyst Notes: - CVE Program Container: References: - https://lists.x.org/archives/xorg-announce/2020-July/003050.html - https://www.openwall.com/lists/oss-security/2020/07/31/1 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14344 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XY4H2SIEF2362AMNX5ZKWAELG
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XY4H2SIEF2362AMNX5ZKWAELGU7LKFJB/ - https://security.gentoo.org/glsa/202008-18 - https://usn.ubuntu.com/4487-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VDDSAYV7XGNRCXE7HCU23645MG74OFF/ - https://usn.ubuntu.com/4487-2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7AVXCQOSCAPKYYHFIJAZ6E2C7LJBTLXF/
CVE ID: CVE-2020-14345 State: PUBLISHED Published: 2020-09-15T13:51:39 Last Updated: 2024-08-04T12:39:36.524Z Vendors: n/a Products: xorg-x11-server Problem Types: CWE-119 Description: A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1862241 - https://lists.x.org/archives/xorg-announce/2020-August/003058.html - https://usn.ubuntu.com/4490-1/ - https://usn.ubun
- https://lists.x.org/archives/xorg-announce/2020-August/003058.html - https://usn.ubuntu.com/4490-1/ - https://usn.ubuntu.com/4488-2/ - https://security.gentoo.org/glsa/202012-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-1416/ - http://www.openwall.com/lists/oss-security/2021/01/15/1
CVE ID: CVE-2020-14346 State: PUBLISHED Published: 2020-09-15T00:00:00 Last Updated: 2024-08-04T12:39:36.531Z Vendors: n/a Products: xorg-x11-server Problem Types: CWE-191 Description: A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.x.org/archives/xorg-announce/2020-August/003058.html - https://bugzilla.redhat.com/show_bug.cgi?id=1862246 - https://usn.ubuntu.com/4488-2/
announce/2020-August/003058.html - https://bugzilla.redhat.com/show_bug.cgi?id=1862246 - https://usn.ubuntu.com/4488-2/ - https://security.gentoo.org/glsa/202012-01 - https://www.zerodayinitiative.com/advisories/ZDI-20-1417/
CVE ID: CVE-2020-14347 State: PUBLISHED Published: 2020-08-05T13:08:43 Last Updated: 2024-08-04T12:39:36.535Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: The Xorg Project Products: xorg-x11-server Problem Types: CWE-665 Description: A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://lists.x.org/archives/xorg-announce/2020-July/003051.html - https://www.openwa
E Program Container: References: - https://lists.x.org/archives/xorg-announce/2020-July/003051.html - https://www.openwall.com/lists/oss-security/2020/07/31/2 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14347 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00066.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00075.html - https://www.debian.org/security/2020/dsa-4758 - https://usn.ubuntu.com/4488-1/ - https://usn.ubuntu.com/4488-2/ - https://security.gentoo.org/glsa/202012-01