Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-14373 State: PUBLISHED Published: 2020-09-03T17:54:07 Last Updated: 2024-08-04T12:46:33.292Z Vendors: n/a Products: ghostscript Problem Types: CWE-416 Description: A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=ece5cbbd9979cd35737b00e68267762d72feb2ea%3Bhp=1ef5f08f2c2e27efa978f0010669ff22355c385f - https://bugs.ghostscript.com/show_bug.cgi?id=702851 - https://bugzilla.redhat.com/show_bug.cgi?id=1873239
CVE ID: CVE-2020-14374 State: PUBLISHED Published: 2020-09-30T19:10:16 Last Updated: 2024-08-04T12:46:34.327Z Vendors: n/a Products: dpdk Problem Types: CWE-120 Description: A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/09/28/3 - https://bugzilla.redh
- CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/09/28/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1879466 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html - http://www.openwall.com/lists/oss-security/2021/01/04/5 - http://www.openwall.com/lists/oss-security/2021/01/04/1 - http://www.openwall.com/lists/oss-security/2021/01/04/2
CVE ID: CVE-2020-14375 State: PUBLISHED Published: 2020-09-30T18:42:58 Last Updated: 2024-08-04T12:46:34.328Z Vendors: n/a Products: dpdk Problem Types: CWE-367 Description: A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhost_crypto has validated it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?
availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1879468 - https://www.openwall.com/lists/oss-security/2020/09/28/3 - https://usn.ubuntu.com/4550-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html - http://www.openwall.com/lists/oss-security/2021/01/04/5 - http://www.openwall.com/lists/oss-security/2021/01/04/1 - http://www.openwall.com/lists/oss-security/2021/01/04/2
CVE ID: CVE-2020-14376 State: PUBLISHED Published: 2020-09-30T18:49:04 Last Updated: 2024-08-04T12:46:34.601Z Vendors: n/a Products: dpdk Problem Types: CWE-120 Description: A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/09/28/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1879470 - https://usn.ubuntu.com/4550-1/ -
ists/oss-security/2020/09/28/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1879470 - https://usn.ubuntu.com/4550-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html - http://www.openwall.com/lists/oss-security/2021/01/04/5 - http://www.openwall.com/lists/oss-security/2021/01/04/1 - http://www.openwall.com/lists/oss-security/2021/01/04/2
CVE ID: CVE-2020-14377 State: PUBLISHED Published: 2020-09-30T18:53:44 Last Updated: 2024-08-04T12:46:33.887Z Vendors: n/a Products: dpdk Problem Types: CWE-125 Description: A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability. Additional Analyst Notes: - CVE Program Container: References:
lity is to data confidentiality and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/09/28/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1879472 - https://usn.ubuntu.com/4550-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html - http://www.openwall.com/lists/oss-security/2021/01/04/5 - http://www.openwall.com/lists/oss-security/2021/01/04/1 - http://www.openwall.com/lists/oss-security/2021/01/04/2
CVE ID: CVE-2020-14378 State: PUBLISHED Published: 2020-09-30T00:00:00 Last Updated: 2024-08-04T12:46:33.313Z Vendors: n/a Products: dpdk Problem Types: CWE-191 Description: An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/o
or an extended period. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2020/09/28/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1879473 - https://usn.ubuntu.com/4550-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html - http://www.openwall.com/lists/oss-security/2021/01/04/5 - http://www.openwall.com/lists/oss-security/2021/01/04/1 - http://www.openwall.com/lists/oss-security/2021/01/04/2
CVE ID: CVE-2020-14379 State: PUBLISHED Published: 2022-08-16T19:40:15 Last Updated: 2024-08-04T12:46:33.306Z Vendors: n/a Products: Red Hat AMQ Problem Types: CWE-611 Description: A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1840862
CVE ID: CVE-2020-14380 State: PUBLISHED Published: 2021-06-02T12:27:11 Last Updated: 2024-08-04T12:46:34.287Z Vendors: n/a Products: Red Hat Satellite Problem Types: CWE-287 Description: An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1873926
CVE ID: CVE-2020-14381 State: PUBLISHED Published: 2020-12-03T16:21:55.000Z Last Updated: 2025-07-24T03:55:29.949Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1874311 - https://git.kernel.org/pub/scm/linux/kernel/git/
nt: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1874311 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8019ad13ef7f64be44d4f892af9c840179009254
CVE ID: CVE-2020-14382 State: PUBLISHED Published: 2020-09-16T14:37:52 Last Updated: 2024-08-04T12:46:34.336Z Vendors: n/a Products: cryptsetup Problem Types: Out-of-bounds write Description: A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for possible overflow on memory allocation used for intervals array (see statement "intervals = malloc(first_b
not check for possible overflow on memory allocation used for intervals array (see statement "intervals = malloc(first_backup * sizeof(*intervals));"). Due to the bug, library can be *tricked* to expect such allocation was successful but for far less memory then originally expected. Later it may read data FROM image crafted by an attacker and actually write such data BEYOND allocated memory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1874712 - https://usn.ubuntu.com/4493-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OJTQ4KSVCW2NMSU5WFVPOHY46WMNF4OB/ - https://lists.fedora
rchives/list/package-announce%40lists.fedoraproject.org/message/OJTQ4KSVCW2NMSU5WFVPOHY46WMNF4OB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TD6YSD63LLRRC4WQ7DJLSXWNUCY6FWBM/
CVE ID: CVE-2020-14383 State: PUBLISHED Published: 2020-12-02T00:00:00 Last Updated: 2024-08-15T15:47:32.520Z Vendors: n/a Products: samba Problem Types: CWE-391 Description: A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1892636 - https://www.samba.org/samba/security/CVE-2020-14383.html - https://security.gentoo.org/glsa/202012-24 - https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html
CVE ID: CVE-2020-14384 State: PUBLISHED Published: 2020-09-09T13:17:28 Last Updated: 2024-08-04T12:46:33.309Z Vendors: n/a Products: JBossWeb Problem Types: CWE-400 Description: A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1875176
CVE ID: CVE-2020-14385 State: PUBLISHED Published: 2020-09-15T21:14:53 Last Updated: 2024-08-04T12:46:34.096Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Linux Kernel Products: kernel Problem Types: CWE-131 Description: A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE P
nial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f4020438fab05364018c91f7e02ebdd192085933 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14385 - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html - https://usn.ubuntu.com/4576-1/
CVE ID: CVE-2020-14386 State: PUBLISHED Published: 2020-09-16T12:48:12 Last Updated: 2024-08-04T12:46:34.367Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Kernel Products: kernel Problem Types: CWE-787, CWE-250 Description: A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/oss-sec/2020/q3/146 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14386 - https://git.kernel.org/pub/scm/linux/k
ss-sec/2020/q3/146 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14386 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=acf69c946233259ab4d64f8869d4037a198c7f06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNCPXERMUHPSGF6S2VVFL5NVVPBBFB63/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html - http://packetstormsecurity.com/files/159565/Kernel-Live-Patch-Security-Notice-LSN-0072-1.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/
tps://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html - http://www.openwall.com/lists/oss-security/2021/09/17/2 - http://www.openwall.com/lists/oss-security/2021/09/17/4 - http://www.openwall.com/lists/oss-security/2021/09/21/1
CVE ID: CVE-2020-14387 State: PUBLISHED Published: 2021-05-27T19:44:53 Last Updated: 2024-08-04T12:46:33.953Z Vendors: n/a Products: rsync Problem Types: CWE-297 Description: A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4. Additional Analyst Notes: - C
y is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1875549
CVE ID: CVE-2020-14388 State: PUBLISHED Published: 2021-06-02T12:37:55 Last Updated: 2024-08-04T12:46:33.317Z Vendors: n/a Products: Red Hat 3scale API Management Problem Types: CWE-284 Description: A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal account restrictions and access API services where they do not have permission. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1875553
CVE ID: CVE-2020-14389 State: PUBLISHED Published: 2020-11-17T00:00:00 Last Updated: 2024-08-04T12:46:34.090Z Vendors: n/a Products: keycloak Problem Types: CWE-916 Description: It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1875843%2C
CVE ID: CVE-2020-14390 State: PUBLISHED Published: 2020-09-18T17:42:55 Last Updated: 2024-08-04T12:46:34.191Z Vendors: n/a Products: kernel Problem Types: CWE-787 Description: A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1876788 - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg
.org/opensuse-security-announce/2020-10/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-14391 State: PUBLISHED Published: 2021-02-08T22:12:36 Last Updated: 2024-08-04T12:46:34.386Z Vendors: n/a Products: gnome-settings-daemon Problem Types: CWE-522 Description: A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal credentials when a user registers a system through the GNOME Settings User Interface. This flaw allows a local attacker to discover the Red Hat Customer Portal password. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1873093
CVE ID: CVE-2020-14392 State: PUBLISHED Published: 2020-09-16T13:00:20 Last Updated: 2024-08-04T12:46:34.386Z Vendors: n/a Products: perl-dbi Problem Types: CWE-822 Description: An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory corruption, affecting the service's availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1877402 - https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.643 - https://usn.ubuntu.com/4503-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00067.html - http://list
ttps://usn.ubuntu.com/4503-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00067.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00074.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXLKODJ7B57GITDEZZXNSHPK4VBYXYHR/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00026.html
CVE ID: CVE-2020-14393 State: PUBLISHED Published: 2020-09-16T13:27:17 Last Updated: 2024-08-04T12:46:34.242Z Vendors: n/a Products: perl-dbi Problem Types: CWE-121 Description: A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data. Additional Analyst Notes: - CVE Program Container: References: - https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.643 - https://bugzilla.redhat.com/show_bug.cgi?id=1877409 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00067.html - http://lists.opensu
ow_bug.cgi?id=1877409 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00067.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00074.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXLKODJ7B57GITDEZZXNSHPK4VBYXYHR/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00026.html
CVE ID: CVE-2020-14394 State: PUBLISHED Published: 2022-08-17T00:00:00 Last Updated: 2024-08-04T12:46:34.221Z Vendors: n/a Products: QEMU Problem Types: CWE-835 Description: An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1908004 - https://gitlab.com/qemu-project/qemu/-/issues/646 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message
ect/qemu/-/issues/646 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/ - https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE ID: CVE-2020-14395 State: REJECTED Published: N/A Last Updated: 2023-02-01T00:00:00 Description: No description available.
CVE ID: CVE-2020-14396 State: PUBLISHED Published: 2020-06-17T15:13:40 Last Updated: 2024-08-04T12:46:34.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/33441d90a506d5f3ae9388f2752901227e430553 - https://usn.ubuntu.com/4434-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2020-14397 State: PUBLISHED Published: 2020-06-17T15:13:30 Last Updated: 2024-08-04T12:46:34.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/38e98ee61d74f5f5ab4aa4c77146faad1962d6d0 - https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/op
sg00035.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - https://usn.ubuntu.com/4434-1/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html - https://usn.ubuntu.com/4573-1/ - https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
CVE ID: CVE-2020-14398 State: PUBLISHED Published: 2020-06-17T15:13:21 Last Updated: 2024-08-04T12:46:34.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 - https://github.com/LibVNC/libvncserver/commit/57433015f856cc12753378254ce4f1c78f5d9c7b - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg000