Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-36247 State: PUBLISHED Published: 2021-02-19T05:19:56 Last Updated: 2024-08-04T17:23:10.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://listsprd.osu.edu/pipermail/ood-users/2020-April/000397.html
CVE ID: CVE-2020-36248 State: PUBLISHED Published: 2021-02-19T07:00:50 Last Updated: 2024-08-04T17:23:09.913Z Severity: LOW (CVSS 3.9 CVSS:3.1/AC:H/AV:P/A:N/C:H/I:N/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/bypassing-app-lock-pattern-passcode-fingerprint-lock-android-oc-sa-2020-003/
CVE ID: CVE-2020-36249 State: PUBLISHED Published: 2021-02-19T07:00:33 Last Updated: 2024-08-04T17:23:09.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Firewall before 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/bypassing-file-firewall-oc-sa-2020-002/
CVE ID: CVE-2020-36250 State: PUBLISHED Published: 2021-02-19T07:00:17 Last Updated: 2024-08-04T17:23:09.869Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:P/A:N/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the past. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/security-lock-can-be-bypassed-by-changing-the-system-date/
CVE ID: CVE-2020-36251 State: PUBLISHED Published: 2021-02-19T07:00:03 Last Updated: 2024-08-04T17:23:09.943Z Severity: LOW (CVSS 3.5 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a group share, to remove everyone else's access to that share. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/deleting-received-group-share-for-whole-group/
CVE ID: CVE-2020-36252 State: PUBLISHED Published: 2021-02-19T06:59:36 Last Updated: 2024-08-04T17:23:09.846Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number. Additional Analyst Notes: - CVE Program Container: References: - https://owncloud.com/security-advisories/access-to-all-file-versions/
CVE ID: CVE-2020-36254 State: PUBLISHED Published: 2021-02-25T08:29:43 Last Updated: 2024-08-04T17:23:09.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mkj/dropbear/commit/8f8a3dff705fad774a10864a2e3dbcfa9779ceff
CVE ID: CVE-2020-36255 State: PUBLISHED Published: 2021-03-05T02:06:10 Last Updated: 2024-08-04T17:23:09.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/scottbrady91/IdentityModel/issues/4 - https://github.com/scottbrady91/IdentityModel/issues/3 - https://github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0
CVE ID: CVE-2020-36256 State: REJECTED Published: 2022-08-19T22:48:03 Last Updated: 2022-08-19T22:48:03 Description: No description available.
CVE ID: CVE-2020-36257 State: REJECTED Published: 2022-08-22T15:01:30 Last Updated: 2022-08-22T15:01:30 Description: No description available.
CVE ID: CVE-2020-36258 State: REJECTED Published: 2022-08-22T15:01:38 Last Updated: 2022-08-22T15:01:38 Description: No description available.
CVE ID: CVE-2020-36259 State: REJECTED Published: 2022-08-22T15:01:53 Last Updated: 2022-08-22T15:01:53 Description: No description available.
CVE ID: CVE-2020-36260 State: REJECTED Published: 2022-08-22T15:02:09 Last Updated: 2022-08-22T15:02:09 Description: No description available.
CVE ID: CVE-2020-36261 State: REJECTED Published: 2022-08-22T15:02:18 Last Updated: 2022-08-22T15:02:18 Description: No description available.
CVE ID: CVE-2020-36262 State: REJECTED Published: 2022-08-22T15:02:27 Last Updated: 2022-08-22T15:02:27 Description: No description available.
CVE ID: CVE-2020-36263 State: REJECTED Published: 2022-08-22T15:02:37 Last Updated: 2022-08-22T15:02:37 Description: No description available.
CVE ID: CVE-2020-36264 State: REJECTED Published: 2022-08-22T15:02:47 Last Updated: 2022-08-22T15:02:47 Description: No description available.
CVE ID: CVE-2020-36265 State: REJECTED Published: 2022-08-22T15:02:55 Last Updated: 2022-08-22T15:02:55 Description: No description available.
CVE ID: CVE-2020-36266 State: REJECTED Published: 2022-08-22T15:03:07 Last Updated: 2022-08-22T15:03:07 Description: No description available.
CVE ID: CVE-2020-36267 State: REJECTED Published: 2022-08-22T15:03:13 Last Updated: 2022-08-22T15:03:13 Description: No description available.
CVE ID: CVE-2020-36268 State: REJECTED Published: 2022-08-22T15:03:27 Last Updated: 2022-08-22T15:03:27 Description: No description available.
CVE ID: CVE-2020-36269 State: REJECTED Published: 2022-08-22T15:03:41 Last Updated: 2022-08-22T15:03:41 Description: No description available.
CVE ID: CVE-2020-36270 State: REJECTED Published: 2022-08-22T15:03:55 Last Updated: 2022-08-22T15:03:55 Description: No description available.
CVE ID: CVE-2020-36271 State: REJECTED Published: 2022-08-22T15:04:01 Last Updated: 2022-08-22T15:04:01 Description: No description available.
CVE ID: CVE-2020-36272 State: REJECTED Published: 2022-08-22T15:04:12 Last Updated: 2022-08-22T15:04:12 Description: No description available.
CVE ID: CVE-2020-36273 State: REJECTED Published: 2022-08-22T15:04:21 Last Updated: 2022-08-22T15:04:21 Description: No description available.
CVE ID: CVE-2020-36274 State: REJECTED Published: 2022-08-22T15:04:27 Last Updated: 2022-08-22T15:04:27 Description: No description available.
CVE ID: CVE-2020-36275 State: REJECTED Published: 2022-08-22T15:04:40 Last Updated: 2022-08-22T15:04:40 Description: No description available.
CVE ID: CVE-2020-36276 State: REJECTED Published: 2022-08-22T15:04:52 Last Updated: 2022-08-22T15:04:52 Description: No description available.
CVE ID: CVE-2020-36277 State: PUBLISHED Published: 2021-03-11T20:23:46 Last Updated: 2024-08-04T17:23:09.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21997 - https://github.com/DanBloomberg/leptonica/pull/499 - https://github.com/DanBloomberg/leptonica/compare/1.79.0...1.80.0 - https://lists.debian.org/debian-lts-announce/2021/03/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraprojec
lts-announce/2021/03/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQUEA2X6UTH4DMYCMZAWE2QQLN5YANUA/ - https://security.gentoo.org/glsa/202107-53
CVE ID: CVE-2020-36278 State: PUBLISHED Published: 2021-03-11T23:59:41 Last Updated: 2024-08-04T17:23:10.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DanBloomberg/leptonica/compare/1.79.0...1.80.0 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23433 - https://github.com/DanBloomberg/leptonica/commit/8d6e1755518cfb98536d6c3daf0601f226d16842 - https://lists.debian.org/debian-lts-announce/2021/03/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
bian-lts-announce/2021/03/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQUEA2X6UTH4DMYCMZAWE2QQLN5YANUA/ - https://security.gentoo.org/glsa/202107-53
CVE ID: CVE-2020-36279 State: PUBLISHED Published: 2021-03-12T00:00:03 Last Updated: 2024-08-04T17:23:09.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DanBloomberg/leptonica/compare/1.79.0...1.80.0 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22512 - https://github.com/DanBloomberg/leptonica/commit/3c18c43b6a3f753f0dfff99610d46ad46b8bfac4 - https://lists.debian.org/debian-lts-announce/2021/03/msg00037.html - https://lists.fedoraproject.org/archives/list/pac
- https://lists.debian.org/debian-lts-announce/2021/03/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQUEA2X6UTH4DMYCMZAWE2QQLN5YANUA/ - https://security.gentoo.org/glsa/202107-53
CVE ID: CVE-2020-36280 State: PUBLISHED Published: 2021-03-12T00:00:24 Last Updated: 2024-08-04T17:23:10.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DanBloomberg/leptonica/compare/1.79.0...1.80.0 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23654 - https://github.com/DanBloomberg/leptonica/commit/5ba34b1fe741d69d43a6c8cf767756997eadd87c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW/ - htt
doraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQUEA2X6UTH4DMYCMZAWE2QQLN5YANUA/ - https://security.gentoo.org/glsa/202107-53
CVE ID: CVE-2020-36281 State: PUBLISHED Published: 2021-03-12T00:00:58 Last Updated: 2024-08-04T17:23:09.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DanBloomberg/leptonica/compare/1.79.0...1.80.0 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22140 - https://github.com/DanBloomberg/leptonica/commit/5ee24b398bb67666f6d173763eaaedd9c36fb1e5 - https://lists.debian.org/debian-lts-announce/2021/03/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%
s.debian.org/debian-lts-announce/2021/03/msg00037.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RD5AIWHWE334HGYZJR2U3I3JYKSSO2LW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQUEA2X6UTH4DMYCMZAWE2QQLN5YANUA/ - https://security.gentoo.org/glsa/202107-53
CVE ID: CVE-2020-36282 State: PUBLISHED Published: 2021-03-12T00:27:02 Last Updated: 2024-08-04T17:23:09.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40ramon93i7/a99645d0448b - https://github.com/rabbitmq/rabbitmq-jms-client/issues/135 - https://github.com/rabbitmq/rabbitmq-jms-client/releases/tag/v1.15.2 - https://github.com/rabbitmq/rabbitmq-jms-client/releases/tag/v2.2.0
CVE ID: CVE-2020-36283 State: PUBLISHED Published: 2021-03-24T15:23:29 Last Updated: 2024-08-04T17:23:09.934Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities. Additional Analyst Notes: - CVE
form cross-site scripting attacks, Web cache poisoning, and other malicious activities. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/198443 - https://www.hidglobal.com/sites/default/files/resource_files/hid-psa-2020-01-omnikey-csrf-security-advisory-paper.pdf
CVE ID: CVE-2020-36284 State: PUBLISHED Published: 2021-04-06T15:36:50 Last Updated: 2024-08-04T17:23:10.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Union Pay up to 3.4.93.4.9, for android, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows attackers to shop for free in merchants' websites and mobile apps, via a crafted authentication code (MAC) which is generated based on a secret key which is NULL. Additional Analyst Notes: - CVE Program Container: References: - https://www.dropbox.com/s/6smwnbrp0kgsgrc/poc_code.py?dl=0 - https://www.dropbox.com/s/czbkdr73tclq2nr/UnionPay_Vulnerability_Report.txt?dl=0 - http://mobitec.ie.cuhk.edu.
py?dl=0 - https://www.dropbox.com/s/czbkdr73tclq2nr/UnionPay_Vulnerability_Report.txt?dl=0 - http://mobitec.ie.cuhk.edu.hk/cve_2020/
CVE ID: CVE-2020-36285 State: PUBLISHED Published: 2021-04-06T15:38:40 Last Updated: 2024-08-04T17:23:10.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows attackers to shop for free in merchants' websites and mobile apps, via a crafted authentication code (MAC) which is generated based on a secret key which is NULL. Additional Analyst Notes: - CVE Program Container: References: - https://www.dropbox.com/s/6smwnbrp0kgsgrc/poc_code.py?dl=0 - https://www.dropbox.com/s/czbkdr73tclq2nr/UnionPay_Vulnerability_Report.txt?dl=0 - http://mobitec.ie.cuhk.
ode.py?dl=0 - https://www.dropbox.com/s/czbkdr73tclq2nr/UnionPay_Vulnerability_Report.txt?dl=0 - http://mobitec.ie.cuhk.edu.hk/cve_2020/
CVE ID: CVE-2020-36286 State: PUBLISHED Published: 2021-04-01T03:10:12.032285Z Last Updated: 2024-09-16T19:24:29.543Z Vendors: Atlassian Products: Jira Server, Jira Data Center Problem Types: Information Disclosure Description: The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly visible issue field. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-72272
CVE ID: CVE-2020-36287 State: PUBLISHED Published: 2021-04-09T02:00:14.081639Z Last Updated: 2024-09-16T16:39:12.728Z Vendors: Atlassian Products: Jira Server, Jira Data Center Problem Types: CWE-863 Description: The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions check. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-72258
CVE ID: CVE-2020-36288 State: PUBLISHED Published: 2021-04-14T23:45:17.871738Z Last Updated: 2024-10-17T14:02:56.389Z Vendors: Atlassian Products: Jira Server, Jira Data Center Problem Types: Cross Site Scripting (XSS) Description: The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.1 allows remote attackers to inject arbitrary HTML or JavaScript via a DOM Cross-Site Scripting (XSS) vulnerability caused by parameter pollution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/JRASERVER-72115
CVE ID: CVE-2020-36289 State: PUBLISHED Published: 2021-05-12T03:30:12.264687Z Last Updated: 2024-10-17T14:27:07.580Z Vendors: Atlassian Products: Jira Server, Jira Data Center Problem Types: Information Disclosure Description: Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/JRASERVER-71559
CVE ID: CVE-2020-36290 State: PUBLISHED Published: 2022-07-26T04:05:14.704626Z Last Updated: 2024-10-03T18:36:30.272Z Vendors: Atlassian Products: Confluence Server, Confluence Data Center Problem Types: Cross Site Scripting (XSS) Description: The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before version 7.7.4 allows remote attackers with permission to edit a page or blog to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the page excerpt functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.co
ity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.atlassian.com/browse/CONFSERVER-60118
CVE ID: CVE-2020-36306 State: PUBLISHED Published: 2021-04-06T07:59:42 Last Updated: 2024-08-04T17:23:10.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html
CVE ID: CVE-2020-36307 State: PUBLISHED Published: 2021-04-06T07:59:32 Last Updated: 2024-08-04T17:23:10.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html
CVE ID: CVE-2020-36308 State: PUBLISHED Published: 2021-04-06T07:59:18 Last Updated: 2024-08-04T17:23:10.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html
CVE ID: CVE-2020-36309 State: PUBLISHED Published: 2021-04-06T17:32:45.000Z Last Updated: 2025-11-03T19:25:36.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openresty/lua-nginx-module/compare/v0.10.15...v0.10.16 - https://github.com/openresty/lua-nginx-module/pull/1654 - https://news.ycombinator.com/item?id=26712562 - https://security.netapp.com/advisory/ntap-20210507-0005/
CVE ID: CVE-2020-36310 State: PUBLISHED Published: 2021-04-06T23:29:14 Last Updated: 2024-08-04T17:23:10.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite loop for certain nested page faults, aka CID-e72436bc3a52. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e72436bc3a5206f95bb384e741154166ddb3202e - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8 - https://www.debian.org/security/2022/dsa-5095
CVE ID: CVE-2020-36311 State: PUBLISHED Published: 2021-04-06T23:28:49 Last Updated: 2024-08-04T17:23:10.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions), aka CID-7be74942f184. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7be74942f184fdfba34ddd19a0d995deb34d4a03 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9 - https://lists.debian.org
f184fdfba34ddd19a0d995deb34d4a03 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9 - https://lists.debian.org/debian-lts-announce/2021/07/msg00015.html - https://www.debian.org/security/2021/dsa-4941
CVE ID: CVE-2020-36312 State: PUBLISHED Published: 2021-04-06T23:28:25 Last Updated: 2024-08-04T17:23:10.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f65886606c2d3b562716de030706dfe1bea4ed5e - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.10
CVE ID: CVE-2020-36313 State: PUBLISHED Published: 2021-04-06T23:28:11 Last Updated: 2024-08-04T17:23:10.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range access to memslots after a deletion, aka CID-0774a964ef56. This affects arch/s390/kvm/kvm-s390.c, include/linux/kvm_host.h, and virt/kvm/kvm_main.c. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0774a964ef561b7170d8d1b1bfe6f88002b6d219 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7 - https://security.netapp.com/advisory/ntap
fe6f88002b6d219 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7 - https://security.netapp.com/advisory/ntap-20210604-0005/