Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10750 - https://github.com/jaegertracing/jaeger/releases/tag/v1.18.1
CVE ID: CVE-2020-10751 State: PUBLISHED Published: 2020-05-26T14:54:32 Last Updated: 2024-08-04T11:14:15.560Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: The Linux Foundation Products: kernel Problem Types: CWE-349 Description: A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing. Additional Analyst Notes: - CVE Program Container: References: - h
th the granted permission without further processing. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2020/05/27/3 - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.debian.org/security/2020/dsa-4698 - https://www.debian.org/security/2020/dsa-4699 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - https://usn.ubuntu.com/4389-1/ - https://usn.ubuntu.com/4390-1/ - https://usn.ubuntu.com/4391-1/ - http://lists.opensuse.org/opensuse-security-
4389-1/ - https://usn.ubuntu.com/4390-1/ - https://usn.ubuntu.com/4391-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://usn.ubuntu.com/4413-1/ - https://usn.ubuntu.com/4412-1/ - https://www.oracle.com/security-alerts/cpuApr2021.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10751 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb73974172ffaaf57a7c42f35424d9aece1a5af6 - https://www.openwall.com/lists/oss-security/2020/04/30/5 - https://lore.kernel.org/selinux/CACT4Y+b8HiV6KFuAPysZD=5hmyO4QisgxCKi4DHU3CfMPSP=yg%40mail.gmail.com/
CVE ID: CVE-2020-10752 State: PUBLISHED Published: 2020-06-12T22:09:39 Last Updated: 2024-08-04T11:14:15.402Z Vendors: Openshift Products: openshift/openshift-apiserver Problem Types: Other Description: A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API Server panic occurred. This flaw allows an attacker with the ability to cause an API Server error to read the logs, and use the leaked OAuthToken to log into the API Server with the leaked token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openshift/origin/blob/master/vendor/k8s.io/kubernetes/staging/src/k8s.io/apis
ontainer: References: - https://github.com/openshift/origin/blob/master/vendor/k8s.io/kubernetes/staging/src/k8s.io/apiserver/pkg/server/filters/wrap.go#L39 - https://github.com/openshift/enhancements/pull/323
CVE ID: CVE-2020-10753 State: PUBLISHED Published: 2020-06-26T00:00:00 Last Updated: 2024-08-04T11:14:15.190Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Ceph Storage Problem Types: CWE-113 Description: A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue. Additional Analyst Notes: - CVE Program Container: Refere
made. Ceph versions 3.x and 4.x are vulnerable to this issue. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10753 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00062.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFU7LXEL2UZE565FJBTY7UGH2O7ZUBVS/ - https://usn.ubuntu.com/4528-1/ - https://security.gentoo.org/glsa/202105-39 - https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
CVE ID: CVE-2020-10754 State: PUBLISHED Published: 2020-06-08T17:16:26 Last Updated: 2024-08-04T11:14:15.561Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: [Red Hat] Products: NetworkManager Problem Types: CWE-287, CWE-306 Description: It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10754 - https://lis
t Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10754 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44FTVXWKDYIAMOOP2PZMUY3D2QNWAVBZ/
CVE ID: CVE-2020-10755 State: PUBLISHED Published: 2020-06-10T15:55:43 Last Updated: 2024-08-04T11:14:15.584Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: openstack-cinder Problem Types: CWE-522 Description: An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleIO or VxFlex OS backend storage driver, credentials for the entire backend are exposed in the ``connection_info`` element in all Block Storag
nd storage driver, credentials for the entire backend are exposed in the ``connection_info`` element in all Block Storage v3 Attachments API calls containing that element. This flaw enables an end-user to create a volume, make an API call to show the attachment detail information, and retrieve a username and password that may be used to connect to another user's volume. Additionally, these credentials are valid for the ScaleIO or VxFlex OS Management API, should an attacker discover the Management API endpoint. Source: OpenStack project Additional Analyst Notes: - CVE Program Container: References: - https://wiki.openstack.org/wiki/OSSN/OSSN-0086 - https://bugzilla.redhat.com/show_bug.cgi?id
am Container: References: - https://wiki.openstack.org/wiki/OSSN/OSSN-0086 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10755 - https://usn.ubuntu.com/4420-1/
CVE ID: CVE-2020-10756 State: PUBLISHED Published: 2020-07-09T15:34:52 Last Updated: 2024-08-04T11:14:14.767Z Vendors: n/a Products: Slirp Problem Types: Out-of-bounds Read Description: An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1835986
1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1835986 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYTZ32P67PZER6P7TW6FQK3SZRKQLVEI/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00040.html - https://www.debian.org/security/2020/dsa-4728 - https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html - https://usn.ubuntu.com/4437-1/ - https://www.zerodayinitiative.com/advisories/ZDI-20-1005/ - https://usn.ubuntu.com/4467-1/ - https://security.netapp.com/advisory/ntap-202010
itiative.com/advisories/ZDI-20-1005/ - https://usn.ubuntu.com/4467-1/ - https://security.netapp.com/advisory/ntap-20201001-0001/
CVE ID: CVE-2020-10757 State: PUBLISHED Published: 2020-06-09T12:40:56 Last Updated: 2024-08-04T11:14:15.434Z Vendors: n/a Products: Kernel Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer. Description: A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/06/04/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5bfea2d9b17f1034a68147a8b03b9789af570
/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5bfea2d9b17f1034a68147a8b03b9789af5700f9 - https://bugzilla.redhat.com/show_bug.cgi?id=1842525 - https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html - https://www.debian.org/security/2020/dsa-4698 - https://www.debian.org/security/2020/dsa-4699 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IEM47BXZJLODRH5YNNZSAQ2NVM63MYMC/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - https://security.netapp.com/advisory/ntap-20200702-0004/ - https://usn.ubuntu.com/4439-1/ - https://usn.ubuntu.com/4426-1/ - https://usn.ubuntu.c
om/advisory/ntap-20200702-0004/ - https://usn.ubuntu.com/4439-1/ - https://usn.ubuntu.com/4426-1/ - https://usn.ubuntu.com/4440-1/ - https://usn.ubuntu.com/4483-1/
CVE ID: CVE-2020-10758 State: PUBLISHED Published: 2020-09-16T15:05:58 Last Updated: 2024-08-04T11:14:15.436Z Vendors: n/a Products: Keycloak Problem Types: Denial of service Description: A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value that exceeds the actual byte count of the request body. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1843849 - https://github.com/keycloak/keycloak/commit/bee4ca89897766c4b68856eafe14f1a3dad34251
CVE ID: CVE-2020-10759 State: PUBLISHED Published: 2020-09-15T18:37:45 Last Updated: 2024-08-04T11:14:14.965Z Vendors: n/a Products: fwupd Problem Types: CWE-347 Description: A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is theoretically possible, but not practical because the Linux Vendor Firmware Service (LVFS) is either not implemented or enabled in versions of fwupd shipped with Red Hat Enterprise Linux 7 and 8. The highest threat from this vulnerability is to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/just
confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/justinsteven/advisories/blob/master/2020_fwupd_dangling_s3_bucket_and_CVE-2020-10759_signature_verification_bypass.md - https://bugzilla.redhat.com/show_bug.cgi?id=1844316
CVE ID: CVE-2020-10760 State: PUBLISHED Published: 2020-07-06T18:02:10 Last Updated: 2024-08-04T11:14:15.429Z Vendors: n/a Products: Samba Problem Types: Use After Free Description: A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1849509%3B - https://www.samba.org/samba/security/CVE-2020-10760.html - https://usn.ubuntu.com/4409-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXU
om/4409-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html - https://security.gentoo.org/glsa/202007-15 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html
CVE ID: CVE-2020-10761 State: PUBLISHED Published: 2020-06-09T12:07:53 Last Updated: 2024-08-04T11:14:14.997Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: Red Hat Products: QEMU: Problem Types: CWE-617 Description: An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-
denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/06/09/1 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10761 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html - https://security.netapp.com/advisory/ntap-20200731-0001/ - https://usn.ubuntu.com/4467-1/ - https://security.gentoo.org/glsa/202011-09
CVE ID: CVE-2020-10762 State: PUBLISHED Published: 2020-11-24T16:27:42 Last Updated: 2024-08-04T11:14:15.607Z Vendors: n/a Products: gluster-block Problem Types: CWE-732 Description: An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_history.log file which is world-readable. This flaw allows local users to obtain sensitive information by reading the log file. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1845067 - https://github.com/
Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1845067 - https://github.com/gluster/gluster-block/releases/tag/v0.5.1
CVE ID: CVE-2020-10763 State: PUBLISHED Published: 2020-11-24T16:17:23 Last Updated: 2024-08-04T11:14:15.593Z Vendors: n/a Products: heketi Problem Types: CWE-532 Description: An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive information such as gluster-block passwords. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1845387 - https://github.com/heketi/heketi/releases/tag/v10.1.0
CVE ID: CVE-2020-10764 State: REJECTED Published: N/A Last Updated: 2023-01-19T00:00:00 Description: No description available.
CVE ID: CVE-2020-10765 State: REJECTED Published: N/A Last Updated: 2023-01-19T00:00:00 Description: No description available.
CVE ID: CVE-2020-10766 State: PUBLISHED Published: 2020-09-15T22:10:27 Last Updated: 2024-08-04T11:14:15.011Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Linux Kernel Products: kernel Problem Types: CWE-440 Description: A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerabilit
s conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10766 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbbe2ad02e9df26e372f38cc3e70dab9222c832e
CVE ID: CVE-2020-10767 State: PUBLISHED Published: 2020-09-15T22:14:41 Last Updated: 2024-08-04T11:14:15.591Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Linux Kernel Products: kernel Problem Types: CWE-440 Description: A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This flaw allows a local attacker to perform a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confiden
m a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=21998a351512eba4ed5969006f0c55882d995ada - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10767
CVE ID: CVE-2020-10768 State: PUBLISHED Published: 2020-09-15T23:13:30 Last Updated: 2024-08-04T11:14:15.299Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Linux Kernel Products: kernel Problem Types: CWE-440 Description: A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/sc
ty is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4d8df8cbb9156b0a0ab3f802b80cb5db57acc0bf - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10768
CVE ID: CVE-2020-10769 State: PUBLISHED Published: 2020-06-26T15:32:34 Last Updated: 2024-08-04T11:14:15.536Z Vendors: n/a Products: Kernel Problem Types: Improper Restriction of Operations within the Bounds of a Memory Buffer Description: A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allows a local attacker with user privileges to cause a denial of service. Additional Analyst Notes: - CVE Program Con
w allows a local attacker with user privileges to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1708775%3B - https://lkml.org/lkml/2019/1/21/675 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html - https://www.oracle.com/security-alerts/cpuApr2021.html
CVE ID: CVE-2020-10770 State: PUBLISHED Published: 2020-12-15T00:00:00 Last Updated: 2024-08-04T11:14:15.437Z Vendors: n/a Products: keycloak Problem Types: CWE-918 Description: A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this parameter to execute a Server-side request forgery (SSRF) attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1846270 - http://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.html
CVE ID: CVE-2020-10771 State: PUBLISHED Published: 2021-06-02T11:02:53 Last Updated: 2024-08-04T11:14:14.781Z Vendors: n/a Products: Infinispan Problem Types: CWE-352 Description: A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1846293 - https://security.netapp.com/advisory/ntap-20210827-0003/
CVE ID: CVE-2020-10772 State: PUBLISHED Published: 2020-11-27T17:40:05 Last Updated: 2024-08-04T11:14:15.485Z Vendors: n/a Products: unbound Problem Types: CWE-406 Description: An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound that shipped before the mentioned erratum. This issue is about the incomplete fix for CVE-2020-12662, and it does not affect upstream versions of Unbound. Additional Analyst Notes: - CVE Program Container
r CVE-2020-12662, and it does not affect upstream versions of Unbound. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1846026
CVE ID: CVE-2020-10773 State: PUBLISHED Published: 2020-09-10T16:07:48 Last Updated: 2024-08-04T11:14:14.957Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: [UNKNOWN] Products: kernel Problem Types: CWE-626 Description: A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10773 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b8e51a6a9db94bc
ug.cgi?id=CVE-2020-10773 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b8e51a6a9db94bc1fb18ae831b3dab106b5a4b5f
CVE ID: CVE-2020-10774 State: PUBLISHED Published: 2021-05-27T18:46:18 Last Updated: 2024-08-04T11:14:15.551Z Vendors: n/a Products: kernel Problem Types: CWE-805 Description: A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rh_features file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1846964
CVE ID: CVE-2020-10775 State: PUBLISHED Published: 2020-08-24T16:13:00 Last Updated: 2024-08-04T11:14:15.422Z Vendors: n/a Products: ovirt-engine Problem Types: CWE-451 Description: An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1847420