Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
attempts that it would have to perform to forge a reply and have it accepted by dnsmasq. This issue is mentioned in the "Birthday Attacks" section of RFC5452. If chained with CVE-2020-25684, the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.jsof-tech.com/disclosures/dnspooq/ - https://bugzilla.redhat.com/show_bug.cgi?id=1890125 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYW3IR6APUSKOYKL5FT3ACTIHWHGQY32/ - https://security.gentoo.org/glsa/202101-17 - https://www.debian.org/security/2021/dsa-
W3IR6APUSKOYKL5FT3ACTIHWHGQY32/ - https://security.gentoo.org/glsa/202101-17 - https://www.debian.org/security/2021/dsa-4844 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGB7HL3OWHTLEPSMLDGOMXQKG3KM2QME/ - https://www.arista.com/en/support/advisories-notices/security-advisories/12135-security-advisory-61
CVE ID: CVE-2020-25687 State: PUBLISHED Published: 2021-01-20T16:31:41.000Z Last Updated: 2025-11-04T19:12:15.417Z Vendors: n/a Products: dnsmasq Problem Types: CWE-122 Description: A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated memory. This flaw is caused by the lack of length checks in rfc1035.c:extract_name(), which could be abused to make the code execute memcpy() with a negative size in sort_rrset() and cause a crash in dnsmasq, resulting in a denial
make the code execute memcpy() with a negative size in sort_rrset() and cause a crash in dnsmasq, resulting in a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.jsof-tech.com/disclosures/dnspooq/ - https://bugzilla.redhat.com/show_bug.cgi?id=1891568 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYW3IR6APUSKOYKL5FT3ACTIHWHGQY32/ - https://security.gentoo.org/glsa/202101-17 - https://www.debian.org/security/2021/dsa-4844 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGB7HL
/2021/dsa-4844 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGB7HL3OWHTLEPSMLDGOMXQKG3KM2QME/ - https://lists.debian.org/debian-lts-announce/2021/03/msg00027.html
CVE ID: CVE-2020-25688 State: PUBLISHED Published: 2020-11-23T21:07:06 Last Updated: 2024-08-04T15:40:36.675Z Vendors: n/a Products: rhacm Problem Types: CWE-321 Description: A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository. This would result in all installations using the same certificates. If an attacker could observe network traffic internal to a cluster, they could use the private key to decode API requests that should be protected by TLS sessions, potentially obtaining information they would not otherwise be able to. These certificates are not used for service auth
potentially obtaining information they would not otherwise be able to. These certificates are not used for service authentication, so no opportunity for impersonation or active MITM attacks were made possible. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1892551
CVE ID: CVE-2020-25689 State: PUBLISHED Published: 2020-10-30T00:00:00 Last Updated: 2024-08-04T15:40:36.775Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: wildfly-core Problem Types: CWE-401 Description: A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Progra
of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25689 - https://security.netapp.com/advisory/ntap-20201123-0006/
CVE ID: CVE-2020-25690 State: PUBLISHED Published: 2021-02-23T03:40:04 Last Updated: 2024-08-04T15:40:36.633Z Vendors: n/a Products: fontforge Problem Types: CWE-119 Description: An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1893188
CVE ID: CVE-2020-25691 State: PUBLISHED Published: 2022-04-01T00:00:00 Last Updated: 2024-08-04T15:40:36.586Z Vendors: n/a Products: darkhttpd Problem Types: CWE-755 Description: A flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a file with a large modification date. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1893725
CVE ID: CVE-2020-25692 State: PUBLISHED Published: 2020-12-08T00:06:29 Last Updated: 2024-08-04T15:40:36.777Z Vendors: n/a Products: openldap Problem Types: CWE-476 Description: A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894567 - https://security.netapp.com/advisory/ntap-20210108-0006/
CVE ID: CVE-2020-25693 State: PUBLISHED Published: 2020-12-03T16:48:26 Last Updated: 2024-08-04T15:40:36.632Z Vendors: n/a Products: CImg Problem Types: CWE-190 Description: A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1893377 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MJ5Q7NNUPXATTBUKHFKIYYAV5GJDYCZL/ - https://lis
ect.org/archives/list/package-announce%40lists.fedoraproject.org/message/MJ5Q7NNUPXATTBUKHFKIYYAV5GJDYCZL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QZ3NPLYXZWEL7HETIFZVCXEZZ2WYYRWA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERBZALTF7LXN2LZLPGAUSVMV53GHHTUC/
CVE ID: CVE-2020-25694 State: PUBLISHED Published: 2020-11-16T00:38:53 Last Updated: 2024-08-04T15:40:36.685Z Vendors: n/a Products: postgresql Problem Types: CWE-327 Description: A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additio
highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894423 - https://www.postgresql.org/support/security/ - https://lists.debian.org/debian-lts-announce/2020/12/msg00005.html - https://security.netapp.com/advisory/ntap-20201202-0003/ - https://security.gentoo.org/glsa/202012-07
CVE ID: CVE-2020-25695 State: PUBLISHED Published: 2020-11-16T00:40:36 Last Updated: 2024-08-04T15:40:36.702Z Vendors: n/a Products: postgresql Problem Types: CWE-89 Description: A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/support/security/ - https://bu
ditional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/support/security/ - https://bugzilla.redhat.com/show_bug.cgi?id=1894425 - https://security.netapp.com/advisory/ntap-20201202-0003/ - https://lists.debian.org/debian-lts-announce/2020/12/msg00005.html - https://security.gentoo.org/glsa/202012-07
CVE ID: CVE-2020-25696 State: PUBLISHED Published: 2020-11-23T21:15:47 Last Updated: 2024-08-04T15:40:36.672Z Vendors: n/a Products: PostgreSQL Problem Types: CWE-183 Description: A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugz
integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894430 - https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/ - https://lists.debian.org/debian-lts-announce/2020/12/msg00005.html - https://security.gentoo.org/glsa/202012-07
CVE ID: CVE-2020-25697 State: PUBLISHED Published: 2021-05-26T12:08:12 Last Updated: 2024-08-04T15:40:36.622Z Vendors: n/a Products: xorg-x11-server Problem Types: CWE-306 Description: A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2020/11/09/3 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - https://seclists.org/oss-sec/2020
f9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - https://seclists.org/oss-sec/2020/q4/105 - http://www.openwall.com/lists/oss-security/2020/11/09/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1895295
CVE ID: CVE-2020-25698 State: PUBLISHED Published: 2020-11-19T16:05:37 Last Updated: 2024-08-04T15:40:36.632Z Vendors: n/a Products: moodle Problem Types: CWE-284 Description: Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do so. Versions affected: 3.5 to 3.5.14, 3.7 to 3.7.8, 3.8 to 3.8.5, 3.9 to 3.9.2 and earlier unsupported versions. Fixed in 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1895419 - https://moodle.org/mod/forum/discuss.php?d=41
ainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1895419 - https://moodle.org/mod/forum/discuss.php?d=413935 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/
CVE ID: CVE-2020-25699 State: PUBLISHED Published: 2020-11-19T00:00:00 Last Updated: 2024-08-04T15:40:36.678Z Vendors: n/a Products: moodle Problem Types: CWE-863 Description: In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1895425 - https://moodle.org/mod/forum/discuss.php?d=413936 - https://lists.fedoraproj
gzilla.redhat.com/show_bug.cgi?id=1895425 - https://moodle.org/mod/forum/discuss.php?d=413936 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/
CVE ID: CVE-2020-25700 State: PUBLISHED Published: 2020-11-19T16:25:09 Last Updated: 2024-08-04T15:40:36.584Z Vendors: n/a Products: moodle Problem Types: CWE-89 Description: In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.8.6, 3.7.9, 3.5.15, and 3.10. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1895427 - https://moodle.org/mod/forum/discuss.php?d=413938 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
//moodle.org/mod/forum/discuss.php?d=413938 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/
CVE ID: CVE-2020-25701 State: PUBLISHED Published: 2020-11-19T16:10:53 Last Updated: 2024-08-04T15:40:36.578Z Vendors: n/a Products: moodle Problem Types: CWE-284 Description: If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneously enable that enrollment method. This could lead to unintended users gaining access to the course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cg
5.15, and 3.10. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1895432 - https://moodle.org/mod/forum/discuss.php?d=413939 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/
CVE ID: CVE-2020-25702 State: PUBLISHED Published: 2020-11-19T16:17:03 Last Updated: 2024-08-04T15:40:36.586Z Vendors: n/a Products: moodle Problem Types: CWE-79 Description: In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1895437 - https://moodle.org/mod/forum/discuss.php?d=413940 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/
CVE ID: CVE-2020-25703 State: PUBLISHED Published: 2020-11-19T16:13:35 Last Updated: 2024-08-04T15:40:36.815Z Vendors: n/a Products: moodle Problem Types: CWE-201 Description: The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, and 3.10. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1895439 - https://moodle.org/mod/forum/discuss.php?d=413941 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5
scuss.php?d=413941 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B55KXBVAT45MDASJ3EK6VIGQOYGJ4NH6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4NNFCHPPHRJNJROIX6SYMHOC6HMKP3GU/
CVE ID: CVE-2020-25704 State: PUBLISHED Published: 2020-12-02T00:00:00 Last Updated: 2024-08-04T15:40:36.653Z Vendors: n/a Products: kernel Problem Types: CWE-401 Description: A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1895961 - https://www.openwall.com/lists/oss-security/2020/11/09/1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00 - https://list
ernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00 - https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html - https://www.starwindsoftware.com/security/sw-20220802-0003/
CVE ID: CVE-2020-25705 State: PUBLISHED Published: 2020-11-17T01:16:17 Last Updated: 2024-08-04T15:40:36.596Z Vendors: n/a Products: Siemens Lunux Based Products Problem Types: CWE-330 Description: A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Based Products (RUGGEDCOM RM1224: All versions between v5.0 and v6.4, SCALANCE M-800: All versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior
l versions between v5.0 and v6.4, SCALANCE S615: All versions between v5.0 and v6.4, SCALANCE SC-600: All versions prior to v2.1.3, SCALANCE W1750D: v8.3.0.1, v8.6.0, and v8.7.0, SIMATIC Cloud Connect 7: All versions, SIMATIC MV500 Family: All versions, SIMATIC NET CP 1243-1 (incl. SIPLUS variants): Versions 3.1.39 and later, SIMATIC NET CP 1243-7 LTE EU: Version Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03
CVE ID: CVE-2020-25706 State: PUBLISHED Published: 2020-11-12T00:00:00 Last Updated: 2024-08-04T15:40:36.597Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: The Cacti Group, Inc. Products: cacti Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xml_path field Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/issues/3723 - https://github.com/Cacti/cacti/commit/39458efcd5286d50e6b7f905fedcdc1059354e6e - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25706 -
cti/cacti/commit/39458efcd5286d50e6b7f905fedcdc1059354e6e - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25706 - https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html
CVE ID: CVE-2020-25707 State: REJECTED Published: 2020-12-14T20:09:22 Last Updated: 2020-12-14T20:09:22 Description: No description available.
CVE ID: CVE-2020-25708 State: PUBLISHED Published: 2020-11-27T17:41:41 Last Updated: 2024-08-04T15:40:36.639Z Vendors: n/a Products: libvncserver Problem Types: CWE-369 Description: A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1896739 - https://lists.debian.org/debian-lts-announce/2022/09/msg00035.html
CVE ID: CVE-2020-25709 State: PUBLISHED Published: 2021-05-18T11:51:42 Last Updated: 2024-08-04T15:40:36.594Z Vendors: n/a Products: OpenLDAP Problem Types: Reachable Assertion Description: A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4792 - https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html - https://support.apple.com/kb/HT212147 - http://seclists.org/fulldisclosure/2021/Feb/14 - h
ounce/2020/12/msg00008.html - https://support.apple.com/kb/HT212147 - http://seclists.org/fulldisclosure/2021/Feb/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1899675 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://security.netapp.com/advisory/ntap-20210716-0003/
CVE ID: CVE-2020-25710 State: PUBLISHED Published: 2021-05-28T10:20:20 Last Updated: 2024-08-04T15:40:36.750Z Vendors: n/a Products: openldap Problem Types: CWE-617 Description: A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4792 - https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html - https://bugzilla.redhat.com/show_bug.cgi?id=1899678 - https://git.openldap.org/openld
s-announce/2020/12/msg00008.html - https://bugzilla.redhat.com/show_bug.cgi?id=1899678 - https://git.openldap.org/openldap/openldap/-/commit/ab3915154e69920d480205b4bf5ccb2b391a0a1f#a2feb6ed0257c21c6672793ee2f94eaadc10c72c - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - https://security.netapp.com/advisory/ntap-20210716-0003/