Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-27541 State: PUBLISHED Published: 2021-01-25T20:32:00 Last Updated: 2024-08-04T16:18:45.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in parsing broadcast discovery UDP packet. Sending a packet of too small size will lead to an attempt of allocating buffer of negative size. As the result service AgentGreen will be terminated and started again later. Additional Analyst Notes: - CVE Program Container: References: - https://dil4rd.medium.com/groundhog-day-in-iot-valley-or-5-cves-in-1-camera-7dc1d2864707
CVE ID: CVE-2020-27542 State: PUBLISHED Published: 2021-01-25T20:37:46 Last Updated: 2024-08-04T16:18:44.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (including network settings). The static IP configuration from QR code is copied to the file /config/ip-static and after reboot data from this file is inserted into bash command (without any escaping). So bash injection is possible. Camera doesn't parse QR codes if it's already successfully configured. Camera is always rebooted after successful configuration via QR code. Additional Analyst Notes: - CVE Program Con
gured. Camera is always rebooted after successful configuration via QR code. Additional Analyst Notes: - CVE Program Container: References: - https://dil4rd.medium.com/groundhog-day-in-iot-valley-or-5-cves-in-1-camera-7dc1d2864707
CVE ID: CVE-2020-27543 State: PUBLISHED Published: 2021-02-25T16:15:00 Last Updated: 2024-08-04T16:18:44.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/restify-paginate - https://github.com/paulvarache/restify-paginate/ - https://github.com/secoats/cve/tree/master/CVE-2020-27543_dos_restify-paginate - https://security.netapp.com/advisory/ntap-20210401-0002/
CVE ID: CVE-2020-27544 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T18:48:32.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remote attackers to execute arbitrary code via crafted payload to function parse_message in file Connection.py. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FoldingAtHome/fah-control/commit/9b619ae64443997948a36dda01b420578de1af77
CVE ID: CVE-2020-27545 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T16:23:01.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/libdwarf/ - https://github.com/davea42/libdwarf-code/commit/95f634808c01f1c61bbec56ed2395af997f397ea - https://www.prevanders.net/dwarfbug.html#DW202010-001 - http://web.archive.org/web/20190601140703/https://sourceforge.net/projects/libdwarf/ - https://b
bug.html#DW202010-001 - http://web.archive.org/web/20190601140703/https://sourceforge.net/projects/libdwarf/ - https://bugzilla.redhat.com/show_bug.cgi?id=2025694
CVE ID: CVE-2020-27553 State: PUBLISHED Published: 2020-11-17T14:23:17 Last Updated: 2024-08-04T16:18:44.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows an attacker with network access to the web-server to download any files from the “/etc” folder without authentication. No path traversal sequences are needed to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE ID: CVE-2020-27554 State: PUBLISHED Published: 2020-11-17T14:21:56 Last Updated: 2024-08-04T16:18:45.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device. Additional Analyst Notes: - CVE Program Container: References: - https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE ID: CVE-2020-27555 State: PUBLISHED Published: 2020-11-17T14:20:52 Last Updated: 2024-08-04T16:18:44.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE ID: CVE-2020-27556 State: PUBLISHED Published: 2020-11-17T14:19:44 Last Updated: 2024-08-04T16:18:45.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device. Additional Analyst Notes: - CVE Program Container: References: - https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE ID: CVE-2020-27557 State: PUBLISHED Published: 2020-11-17T14:18:54 Last Updated: 2024-08-04T16:18:44.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials. Additional Analyst Notes: - CVE Program Container: References: - https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE ID: CVE-2020-27558 State: PUBLISHED Published: 2020-11-17T14:17:18 Last Updated: 2024-08-04T16:18:45.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream. Additional Analyst Notes: - CVE Program Container: References: - https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns
CVE ID: CVE-2020-27560 State: PUBLISHED Published: 2020-10-22T00:00:00 Last Updated: 2024-08-04T16:18:45.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/ef59bd764f88d893f1219fee8ba696a5d3f8c1c4 - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00037.html - https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27568 State: PUBLISHED Published: 2021-04-21T21:16:44 Last Updated: 2024-08-04T16:18:45.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security. Additional Analyst Notes: - CVE Program Container: References: - https://docs.aviatrix.com/HowTos/security_bulletin_article.html#insecure-file-permissions
CVE ID: CVE-2020-27569 State: PUBLISHED Published: 2021-04-21T21:23:07 Last Updated: 2024-08-04T16:18:44.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system. Additional Analyst Notes: - CVE Program Container: References: - https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-abitrary-file-write
CVE ID: CVE-2020-27574 State: PUBLISHED Published: 2021-03-08T20:57:59 Last Updated: 2024-08-04T16:18:44.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://maxum.com - https://tvrbk.github.io/cve/2021/03/07/rumpus.html
CVE ID: CVE-2020-27575 State: PUBLISHED Published: 2021-03-08T21:02:56 Last Updated: 2024-08-04T16:18:44.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation. Additional Analyst Notes: - CVE Program Container: References: - http://maxum.com - https://tvrbk.github.io/cve/2021/03/07/rumpus.html
CVE ID: CVE-2020-27576 State: PUBLISHED Published: 2021-03-08T21:13:16 Last Updated: 2024-08-04T16:18:44.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://maxum.com - https://tvrbk.github.io/cve/2021/03/07/rumpus.html
CVE ID: CVE-2020-27583 State: PUBLISHED Published: 2021-01-21T00:00:40 Last Updated: 2024-08-04T16:18:45.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://n4nj0.github.io/advisories/ibm-infosphere-java-deserialization/
CVE ID: CVE-2020-27585 State: PUBLISHED Published: 2020-11-30T19:41:56 Last Updated: 2024-08-04T16:18:44.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password. Additional Analyst Notes: - CVE Program Container: References: - https://cyberworldmirror.com/quick-heal-addressed-multiple-vulnerabilities-in-version-19-update-now/
CVE ID: CVE-2020-27586 State: PUBLISHED Published: 2020-11-30T19:41:59 Last Updated: 2024-08-04T16:18:44.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text. Additional Analyst Notes: - CVE Program Container: References: - https://cyberworldmirror.com/quick-heal-addressed-multiple-vulnerabilities-in-version-19-update-now/
CVE ID: CVE-2020-27587 State: PUBLISHED Published: 2020-11-30T19:42:02 Last Updated: 2024-08-04T16:18:44.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password. Additional Analyst Notes: - CVE Program Container: References: - https://cyberworldmirror.com/quick-heal-addressed-multiple-vulnerabilities-in-version-19-update-now/
CVE ID: CVE-2020-27589 State: PUBLISHED Published: 2020-11-06T13:15:13 Last Updated: 2024-08-04T16:18:44.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/blackduck/ - https://github.com/blackducksoftware/hub-rest-api-python - https://github.com/blackducksoftware/hub-rest-api-python/pull/113/commits/273b27d0de1004389dd8cf43c40b1197c787e7cd - https://www.optiv.com/explore-optiv-insights/source-zero/certificate-validation-disabled-black-duck-api-wrapper - https://
tps://www.optiv.com/explore-optiv-insights/source-zero/certificate-validation-disabled-black-duck-api-wrapper - https://community.synopsys.com/s/question/0D52H00005JCZAXSA5/announcement-black-duck-defect-identified
CVE ID: CVE-2020-27600 State: PUBLISHED Published: 2021-04-02T20:11:40 Last Updated: 2024-08-04T16:18:44.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com - https://github.com/pwnninja/dlink/blob/main/DIR-846_SetMasterWLanSettingsCI.md
CVE ID: CVE-2020-27601 State: PUBLISHED Published: 2020-10-21T14:09:49 Last Updated: 2024-08-04T16:18:44.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.6...v2.2.7 - https://github.com/bigbluebutton/bigbluebutton/commit/7dcdfb191373684bafa7b11cdd0128c9869040a1
CVE ID: CVE-2020-27602 State: PUBLISHED Published: 2020-10-21T14:07:37 Last Updated: 2024-08-04T16:18:45.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton before 2.2.7 does not have a protection mechanism for separator injection in meetingId, userId, and authToken. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.6...v2.2.7 - https://github.com/bigbluebutton/bigbluebutton/commit/4bfd924c64da2681f4c037026021f47eb189d717
CVE ID: CVE-2020-27603 State: PUBLISHED Published: 2020-10-21T14:09:38 Last Updated: 2024-08-04T16:18:44.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files. Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html
CVE ID: CVE-2020-27604 State: PUBLISHED Published: 2020-10-21T14:09:11 Last Updated: 2024-08-04T16:18:45.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton before 2.3 does not implement LibreOffice sandboxing. This might make it easier for remote authenticated users to read the API shared secret in the bigbluebutton.properties file. With the API shared secret, an attacker can (for example) use api/join to join an arbitrary meeting regardless of its guestPolicy setting. Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html - https://docs.bigbluebutton.org/dev/api
lem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html - https://docs.bigbluebutton.org/dev/api.html
CVE ID: CVE-2020-27605 State: PUBLISHED Published: 2020-10-21T14:09:03 Last Updated: 2024-08-04T16:18:45.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related to a "schwache Sandbox." Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html
CVE ID: CVE-2020-27606 State: PUBLISHED Published: 2020-10-21T14:07:44 Last Updated: 2024-08-04T16:18:45.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html
CVE ID: CVE-2020-27607 State: PUBLISHED Published: 2020-10-21T14:08:55 Last Updated: 2024-08-04T16:18:44.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the server should stop accepting audio data from the client. It does not directly configure the client to stop sending audio data to the server, and thus a modified server could store the audio data and/or transmit it to one or more meeting participants or other third parties. Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html
CVE ID: CVE-2020-27608 State: PUBLISHED Published: 2020-10-21T14:07:51 Last Updated: 2024-08-04T16:18:44.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html
CVE ID: CVE-2020-27609 State: PUBLISHED Published: 2020-10-21T14:08:45 Last Updated: 2024-08-04T16:18:44.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface. This may result in data storage beyond what is authorized for a specific meeting topic or participant. Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html - https://docs.bigbluebutton.org/admin/privacy.html
CVE ID: CVE-2020-27610 State: PUBLISHED Published: 2020-10-21T14:07:58 Last Updated: 2024-08-04T16:18:45.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network services to external interfaces, and does not automatically set up a firewall configuration to block external access. Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html
CVE ID: CVE-2020-27611 State: PUBLISHED Published: 2020-10-21T14:08:35 Last Updated: 2024-08-04T16:18:45.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://docs.bigbluebutton.org/admin/privacy.html - https://github.com/bigbluebutton/bigbluebutton/commit/d0bc77c3dbd858295004f15d7a57ec35e6b203d6
CVE ID: CVE-2020-27612 State: PUBLISHED Published: 2020-10-21T14:08:05 Last Updated: 2024-08-04T16:18:44.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a room, or an information leak to outsiders if any user publishes a screenshot of a browser window. Additional Analyst Notes: - CVE Program Container: References: - https://docs.bigbluebutton.org/admin/privacy.html
CVE ID: CVE-2020-27613 State: PUBLISHED Published: 2020-10-21T14:08:23 Last Updated: 2024-08-04T16:18:44.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation procedure in BigBlueButton before 2.2.28 (or earlier) uses ClueCon as the FreeSWITCH password, which allows local users to achieve unintended FreeSWITCH access. Additional Analyst Notes: - CVE Program Container: References: - https://www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.html
CVE ID: CVE-2020-27614 State: PUBLISHED Published: 2020-12-09T00:00:35 Last Updated: 2024-08-04T16:18:44.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate client requests and allows local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://download.anydesk.com/changelog.txt - https://anydesk.com/cve/2020-27614/
CVE ID: CVE-2020-27615 State: PUBLISHED Published: 2020-10-21T20:07:32 Last Updated: 2024-08-04T16:18:44.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/10441 - https://wpdeeply.com/loginizer-before-1-6-4-sqli-injection/ - https://plugins.trac.wordpress.org/changeset/2401010/loginizer - https://www.zdnet.com/article/wordpress-deploys-forced-security-update-for-dangerous-bug-in-popular-plugin/
CVE ID: CVE-2020-27616 State: PUBLISHED Published: 2020-11-06T07:48:01 Last Updated: 2024-08-04T16:18:45.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05018.html - http://www.openwall.com/lists/oss-security/2020/11/03/2 - https://security.netapp.com/advisory/ntap-20201202-0002/
CVE ID: CVE-2020-27617 State: PUBLISHED Published: 2020-11-06T07:51:37 Last Updated: 2024-08-04T16:18:44.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol. Additional Analyst Notes: - CVE Program Container: References: - https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05731.html - http://www.openwall.com/lists/oss-security/2020/11/02/1 - https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html - https://security.netapp.com/advisory/ntap-20201202-0002/ - https://lists.debian
ian-lts-announce/2020/11/msg00047.html - https://security.netapp.com/advisory/ntap-20201202-0002/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2020-27618 State: PUBLISHED Published: 2021-02-26T00:00:00.000Z Last Updated: 2025-06-09T15:15:47.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=26224 - https://sourceware.