Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-15671 State: PUBLISHED Published: 2020-10-01T18:41:30 Last Updated: 2024-08-04T13:22:30.805Z Vendors: Mozilla Products: Firefox for Android Problem Types: Passwords could be saved to phone keyboard dictionary Description: When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-39/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1653862
CVE ID: CVE-2020-15673 State: PUBLISHED Published: 2020-10-01T18:39:19 Last Updated: 2024-08-04T13:22:30.827Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 Description: Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisorie
ESR < 78.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-43/ - https://www.mozilla.org/security/advisories/mfsa2020-44/ - https://www.mozilla.org/security/advisories/mfsa2020-42/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1648493%2C1660800 - https://www.debian.org/security/2020/dsa-4770 - https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html - https://security.gentoo.org/glsa/202010-02 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html
CVE ID: CVE-2020-15674 State: PUBLISHED Published: 2020-10-01T18:37:06 Last Updated: 2024-08-04T13:22:30.800Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 81 Description: Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-42/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1656063%2C1656064%2C1656067%2C1660293
CVE ID: CVE-2020-15675 State: PUBLISHED Published: 2020-10-01T18:32:08 Last Updated: 2024-08-04T13:22:30.629Z Vendors: Mozilla Products: Firefox Problem Types: Use-After-Free in WebGL Description: When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 81. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-42/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1654211
CVE ID: CVE-2020-15676 State: PUBLISHED Published: 2020-10-01T18:31:41 Last Updated: 2024-08-04T13:22:30.645Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: XSS when pasting attacker-controlled data into a contenteditable element Description: Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-43/ - https://w
alyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-43/ - https://www.mozilla.org/security/advisories/mfsa2020-44/ - https://www.mozilla.org/security/advisories/mfsa2020-42/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1646140 - https://www.debian.org/security/2020/dsa-4770 - https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html - https://security.gentoo.org/glsa/202010-02 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html
CVE ID: CVE-2020-15677 State: PUBLISHED Published: 2020-10-01T18:31:16 Last Updated: 2024-08-04T13:22:30.687Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Download origin spoofing via redirect Description: By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than the site the file was actually downloaded from. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfs
< 78.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-43/ - https://www.mozilla.org/security/advisories/mfsa2020-44/ - https://www.mozilla.org/security/advisories/mfsa2020-42/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1641487 - https://www.debian.org/security/2020/dsa-4770 - https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html - https://security.gentoo.org/glsa/202010-02 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html
CVE ID: CVE-2020-15678 State: PUBLISHED Published: 2020-10-01T18:29:27 Last Updated: 2024-08-04T13:22:30.808Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario Description: When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3. Additional Analyst Not
ation rules. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-43/ - https://www.mozilla.org/security/advisories/mfsa2020-44/ - https://www.mozilla.org/security/advisories/mfsa2020-42/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1660211 - https://www.debian.org/security/2020/dsa-4770 - https://lists.debian.org/debian-lts-announce/2020/10/msg00020.html - https://security.gentoo.org/glsa/202010-02 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00
rg/opensuse-security-announce/2020-10/msg00074.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html
CVE ID: CVE-2020-15679 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:52:55.162Z Vendors: Mozilla Products: Mozilla VPN iOS 1.0.7, Mozilla VPN Windows, Mozilla VPN Android 1.1.0 Problem Types: OAuth Session Fixation on VPN login Description: An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that URL, and obtain authenticated access as that user. This issue is limited to cases where attacker and victim are sharing the same source IP and could allow the ability to view session states and disconnect VPN sessions. This vulnerability affects Mozilla VPN iOS 1.0
uld allow the ability to view session states and disconnect VPN sessions. This vulnerability affects Mozilla VPN iOS 1.0.7 < (929), Mozilla VPN Windows < 1.2.2, and Mozilla VPN Android 1.1.0 < (1360). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2020-48/ - https://github.com/mozilla-services/guardian-vpn-windows/commit/ac6f562973a83f6758cd7ab7aa313e863047d41b - https://github.com/mozilla-mobile/guardian-vpn-android/commit/981c840276ef3aee98cf5d42993d484ee99b28d9 - https://github.com/mozilla-mobile/guardian-vpn-ios/commit/4309f5c9bd2c15cdfd39ac173665fad3f2598b54
CVE ID: CVE-2020-15680 State: PUBLISHED Published: 2020-10-22T20:32:46 Last Updated: 2024-08-04T13:22:30.785Z Vendors: Mozilla Products: Firefox Problem Types: Presence of external protocol handlers could be determined through image tags Description: If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-45/ -
itional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-45/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1658881
CVE ID: CVE-2020-15681 State: PUBLISHED Published: 2020-10-22T20:32:37 Last Updated: 2024-08-04T13:22:30.692Z Vendors: Mozilla Products: Firefox Problem Types: Multiple WASM threads may have overwritten each others' stub table entries Description: When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 82. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-45/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1666568
CVE ID: CVE-2020-15682 State: PUBLISHED Published: 2020-10-22T20:32:25 Last Updated: 2024-08-04T13:22:30.695Z Vendors: Mozilla Products: Firefox Problem Types: The domain associated with the prompt to open an external protocol could be spoofed to display the incorrect origin Description: When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin
al protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-45/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1636654
CVE ID: CVE-2020-15683 State: PUBLISHED Published: 2020-10-22T20:32:14 Last Updated: 2024-08-04T13:22:30.658Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.4, Firefox < 82, and Thunderbird < 78.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.
efox < 82, and Thunderbird < 78.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-45/ - https://www.mozilla.org/security/advisories/mfsa2020-47/ - https://www.mozilla.org/security/advisories/mfsa2020-46/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1576843%2C1656987%2C1660954%2C1662760%2C1663439%2C1666140 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00057.html - https://www.debian.org/security/2020/dsa-4780 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00062.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00027.html - https://security.gentoo.org/glsa/202010-08 -
html - https://lists.debian.org/debian-lts-announce/2020/10/msg00027.html - https://security.gentoo.org/glsa/202010-08 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html
CVE ID: CVE-2020-15684 State: PUBLISHED Published: 2020-10-22T20:31:33 Last Updated: 2024-08-04T13:22:30.668Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 82 Description: Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 82. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-45/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1653764%2C1661402%2C1662259%2C1664257
CVE ID: CVE-2020-15685 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:40:26.591Z Vendors: Mozilla Products: Thunderbird Problem Types: IMAP Response Injection when using STARTTLS Description: During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2021-05/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1622640
CVE ID: CVE-2020-15687 State: PUBLISHED Published: 2020-08-31T15:39:24 Last Updated: 2024-08-04T13:22:30.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1.6.1) allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and Denial of Service (DoS) for previously assigned PCIe devices to the Service VM at runtime. Additional Analyst Notes: - CVE Program Container: References: - https://projectacrn.github.io/latest/ - https://projectacrn.github.io/latest/de
: - CVE Program Container: References: - https://projectacrn.github.io/latest/ - https://projectacrn.github.io/latest/developer-guides/hld/split-dm.html - https://projectacrn.github.io/2.1/asa.html#addressed-in-acrn-v2-1
CVE ID: CVE-2020-15688 State: PUBLISHED Published: 2020-07-23T12:32:37 Last Updated: 2024-08-04T13:22:30.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks. This allows an unauthenticated remote attacker to bypass authentication via capture-replay if TLS is not used to protect the underlying communication channel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/embedthis/goahead-gpl/issues/3 - https://github.com/embedthis/goahead-gpl/issues/3 - http://packetstormsecurity.com/files/159505/EmbedThis-GoAhead-Web-Server-5.1.1-Di
b.com/embedthis/goahead-gpl/issues/3 - http://packetstormsecurity.com/files/159505/EmbedThis-GoAhead-Web-Server-5.1.1-Digest-Authentication-Capture-Replay-Nonce-Reuse.html
CVE ID: CVE-2020-15689 State: PUBLISHED Published: 2020-07-13T13:48:39 Last Updated: 2024-08-04T13:22:30.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/embedthis/appweb-gpl/issues/2
CVE ID: CVE-2020-15690 State: PUBLISHED Published: 2021-01-30T05:12:58 Last Updated: 2024-08-04T13:22:30.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/asyncftpclient.nim#L145 - https://github.com/nim-lang/Nim/compare/v1.2.4...v1.2.6 - https://consensys.net/diligence/vulnerabilities/nim-asyncftpd-crlf-injection/ - https://github.com/tintinweb/pub/tree/master/pocs/cve-2020-15690 - http://www.openwall.com/l
asyncftpd-crlf-injection/ - https://github.com/tintinweb/pub/tree/master/pocs/cve-2020-15690 - http://www.openwall.com/lists/oss-security/2021/02/04/3
CVE ID: CVE-2020-15692 State: PUBLISHED Published: 2020-08-14T18:45:35 Last Updated: 2024-08-04T13:22:30.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file path that will be opened in the default explorer. An attacker can pass one argument to the underlying open command to execute arbitrary registered system commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/browsers.nim#L48 - https://nim-lang.org/blog/2020/07/30/versions-126-and-108-
3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/browsers.nim#L48 - https://nim-lang.org/blog/2020/07/30/versions-126-and-108-released.html - http://www.openwall.com/lists/oss-security/2021/02/04/1 - https://consensys.net/diligence/vulnerabilities/nim-browsers-argument-injection/
CVE ID: CVE-2020-15693 State: PUBLISHED Published: 2020-08-14T18:47:01 Last Updated: 2024-08-04T13:22:30.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL. An injection is possible if the attacker controls any part of the URL provided in a call (such as httpClient.get or httpClient.post), the User-Agent header value, or custom HTTP header names or values. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/httpclient.nim#L1023 - https://nim-lang.org/blog/2020/07/30/versions-126-and-
3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/httpclient.nim#L1023 - https://nim-lang.org/blog/2020/07/30/versions-126-and-108-released.html - http://www.openwall.com/lists/oss-security/2021/02/04/2 - https://consensys.net/diligence/vulnerabilities/nim-httpclient-header-crlf-injection/
CVE ID: CVE-2020-15694 State: PUBLISHED Published: 2020-08-14T18:48:45 Last Updated: 2024-08-04T13:22:30.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For example, httpClient.get().contentLength() does not raise any error if a malicious server provides a negative Content-Length. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/httpclient.nim#L241 - https://nim-lang.org/blog/2020/07/30/versions-126-and-108-released.html - http://www.openwall.com/lists/oss-security/2021/02/04/2 - ht
ng.org/blog/2020/07/30/versions-126-and-108-released.html - http://www.openwall.com/lists/oss-security/2021/02/04/2 - https://consensys.net/diligence/vulnerabilities/nim-httpclient-header-crlf-injection/
CVE ID: CVE-2020-15695 State: PUBLISHED Published: 2020-07-15T15:50:00 Last Updated: 2024-08-04T13:22:30.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! through 3.9.19. A missing token check in the remove request section of com_privacy causes a CSRF vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/820-20200703-core-csrf-in-com-privacy-remove-request-feature.html
CVE ID: CVE-2020-15696 State: PUBLISHED Published: 2020-07-15T15:50:29 Last Updated: 2024-08-04T13:22:30.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! through 3.9.19. Lack of input filtering and escaping allows XSS attacks in mod_random_image. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/822-20200705-core-escape-mod-random-image-link.html
CVE ID: CVE-2020-15697 State: PUBLISHED Published: 2020-07-15T15:50:58 Last Updated: 2024-08-04T13:22:30.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/821-20200704-core-variable-tampering-via-user-table-class.html
CVE ID: CVE-2020-15698 State: PUBLISHED Published: 2020-07-15T15:51:37 Last Updated: 2024-08-04T13:22:30.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information screen could expose Redis or proxy credentials Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/823-20200706-core-system-information-screen-could-expose-redis-or-proxy-credentials.html
CVE ID: CVE-2020-15699 State: PUBLISHED Published: 2020-07-15T15:52:07 Last Updated: 2024-08-04T13:22:30.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups table object can result in a broken site configuration. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/819-20200702-core-missing-checks-can-lead-to-a-broken-usergroups-table-record.html
CVE ID: CVE-2020-15700 State: PUBLISHED Published: 2020-07-15T15:52:30 Last Updated: 2024-08-04T13:22:30.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install endpoint of com_installer causes a CSRF vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/818-20200701-core-csrf-in-com-installer-ajax-install-endpoint.html
CVE ID: CVE-2020-15701 State: PUBLISHED Published: 2020-08-06T22:50:22.407551Z Last Updated: 2024-09-16T20:52:16.329Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Canonical Products: apport Problem Types: CWE-755 Description: An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27.6. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4449-1 - https://launchpa
u27.6. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4449-1 - https://launchpad.net/bugs/1877023 - https://usn.ubuntu.com/4449-1/ - https://usn.ubuntu.com/4449-2/