deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-12771
Published: 2020-05-09
Description: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00071.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html; https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html
CVE: CVE-2020-9314
Published: 2020-05-10
Description: ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2020/May/31; https://www.oracle.com/support/lifetime-support/; https://www.oracle.com/us/assets/lifetime-support-middleware-069163.pdf
CVE: CVE-2020-9315
Published: 2020-05-10
Description: ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://seclists.org/fulldisclosure/2020/May/31; https://www.oracle.com/support/lifetime-support/; https://www.oracle.com/us/assets/lifetime-support-middleware-069163.pdf
CVE: CVE-2020-5538
Published: 2020-05-11
Description: Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code with the SYSTEM privilege on the computer where PALLET CONTROL is installed via unspecified vectors. PalletControl 7 to 9.1 are not affected by this vulnerability, however under the environment where PLS Management Add-on Module is used, all versions are affected.
CVSS Score: 7.8 (HIGH)
References: https://jvn.jp/en/jp/JVN61849442/index.html; https://www.jalinfotec.co.jp/product/pallet/support/Info/notices.html; https://jvn.jp/en/jp/JVN61849442/index.html
CVE: CVE-2020-12743
Published: 2020-05-11
Description: An issue was discovered in Gazie 7.32. A successful installation does not remove or block (or in any other way prevent use of) its own file /setup/install/setup.php, meaning that anyone can request it without authentication. This file allows arbitrary PHP file inclusion via a hidden_req POST parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-552
References: https://sourceforge.net/p/gazie/code/3823/; https://sourceforge.net/p/gazie/code/3823/
CVE: CVE-2020-10685
Published: 2020-05-11
Description: A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchive, win_copy, aws_s3 or copy modules. The temporary directory is created in /tmp leaves the s ts unencrypted. On Operating Systems which /tmp is not a tmpfs but part of the root partition, the directory is only cleared on boot and the decryp emains when the host is switched off. The system will be vulnerable when the system is not running. So decrypted data must be cleared as soon as possible and the data which normally is encrypted ble.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10685; https://github.com/ansible/ansible/pull/68433; https://security.gentoo.org/glsa/202006-11
CVE: CVE-2020-12783
Published: 2020-05-11
Description: Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2021/05/04/7; https://bugs.exim.org/show_bug.cgi?id=2571; https://git.exim.org/exim.git/commit/57aa14b216432be381b6295c312065b2fd034f86
CVE: CVE-2020-1698
Published: 2020-05-11
Description: A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698
CVE: CVE-2020-11108
Published: 2020-05-11
Description: The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. (Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges to root.) The code error is in gravity_DownloadBlocklistFromUrl in gravity.sh.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/157623/Pi-hole-4.4-Remote-Code-Execution.html; http://packetstormsecurity.com/files/157624/Pi-hole-4.4-Remote-Code-Execution-Privilege-Escalation.html; http://packetstormsecurity.com/files/157748/Pi-Hole-heisenbergCompensator-Blocklist-OS-Command-Execution.html
CVE: CVE-2020-11863
Published: 2020-05-11
Description: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00036.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/; https://sourceforge.net/p/libemf/code/commit_browser
CVE: CVE-2020-11864
Published: 2020-05-11
Description: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00036.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/; https://sourceforge.net/p/libemf/code/commit_browser
CVE: CVE-2020-11865
Published: 2020-05-11
Description: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00036.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/; https://sourceforge.net/p/libemf/code/commit_browser
CVE: CVE-2020-11866
Published: 2020-05-11
Description: libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00036.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DFYDSKWFM2R5NKZOO2IN6X7SM3T2PWL/; https://sourceforge.net/p/libemf/code/commit_browser
CVE: CVE-2020-12650
Published: 2020-05-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was intended behavior. Notes: none
CVE: CVE-2020-12745
Published: 2020-05-11
Description: An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protection mechanism and access clipboard content via USSD. The Samsung ID is SVE-2019-16556 (May 2020).
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-12746
Published: 2020-05-11
Description: An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos chipsets) software. Attackers can bypass the Secure Bootloader protection mechanism via a heap-based buffer overflow to execute arbitrary code. The Samsung ID is SVE-2020-16712 (May 2020).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-12747
Published: 2020-05-11
Description: An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 chipsets) software. The Bootloader has a heap-based buffer overflow because of the mishandling of specific commands. The Samsung IDs are SVE-2020-16981, SVE-2020-16991 (May 2020).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-12748
Published: 2020-05-11
Description: An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protection mechanism and designate a different preferred SIM card. The Samsung ID is SVE-2020-16594 (May 2020).
CVSS Score: 5.3 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-12749
Published: 2020-05-11
Description: An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The S.LSI Wi-Fi drivers have a buffer overflow. The Samsung ID is SVE-2020-16906 (May 2020).
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-12750
Published: 2020-05-11
Description: An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via SPEN. The Samsung ID is SVE-2020-17019 (May 2020).
CVSS Score: 7.5 (HIGH)
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-12751
Published: 2020-05-11
Description: An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 (May 2020).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-12752
Published: 2020-05-11
Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. Attackers can determine user credentials via a brute-force attack against the Gatekeeper trustlet. The Samsung ID is SVE-2020-16908 (May 2020).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-307
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-12753
Published: 2020-05-11
Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because of an EL1/EL3 coldboot vulnerability involving raw_resources. The LG ID is LVE-SMP-200006 (May 2020).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://douevenknow.us/post/[PII_REDACTED]22520832/an-el1el3-coldboot-vulnerability; https://lgsecurity.lge.com/; https://www.zdnet.com/article/new-cold-boot-attack-affects-seven-years-of-lg-android-smartphones/
CVE: CVE-2020-12754
Published: 2020-05-11
Description: An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via the window system service. The LG ID is LVE-SMP-170011 (May 2020).
CVSS Score: 7.8 (HIGH)
References: https://lgsecurity.lge.com/; https://lgsecurity.lge.com/
CVE: CVE-2020-12760
Published: 2020-05-11
Description: An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7. The ActiveMQ channel configuration allowed for arbitrary deserialization of Java objects (aka ActiveMQ Minion payload deserialization), leading to remote code execution for any authenticated channel user regardless of its assigned permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/OpenNMS/opennms/releases/tag/opennms-26.0.1-1; https://issues.opennms.org/browse/NMS-12673; https://www.opennms.com/en/blog/2020-04-29-opennms-horizon-26-0-1-luchador-released/
CVE: CVE-2020-12784
Published: 2020-05-11
Description: cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505).
CVSS Score: 5.3 (MEDIUM)
References: https://documentation.cpanel.net/display/CL/86+Change+Log; https://news.cpanel.com/cpanel-tsr-2020-0002-full-disclosure/; https://documentation.cpanel.net/display/CL/86+Change+Log
CVE: CVE-2020-12785
Published: 2020-05-11
Description: cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540).
CVSS Score: 8.1 (HIGH)
References: https://documentation.cpanel.net/display/CL/86+Change+Log; https://news.cpanel.com/cpanel-tsr-2020-0002-full-disclosure/; https://documentation.cpanel.net/display/CL/86+Change+Log
CVE: CVE-2018-1285
Published: 2020-05-11
Description: Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://issues.apache.org/jira/browse/LOG4NET-575; https://lists.apache.org/thread.html/r00b16ac5e0bbf7009a0d167ed58f3f94d0033b0f4b3e3d5025cc4872%40%3Cdev.logging.apache.org%3E; https://lists.apache.org/thread.html/r33564de316d4e4ba0fea1d4d079e62cde1ffe64369c1157243d840d9%40%3Cdev.logging.apache.org%3E
CVE: CVE-2019-19162
Published: 2020-05-11
Description: A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35387; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35387
CVE: CVE-2019-4667
Published: 2020-05-11
Description: IBM UrbanCode Deploy (UCD) 7.0.5.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 171249.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/171249; https://www.ibm.com/support/pages/node/6208076; https://exchange.xforce.ibmcloud.com/vulnerabilities/171249
CVE: CVE-2019-5500
Published: 2020-05-11
Description: Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthenticated attacker to cause a Denial of Service (DoS).
CVSS Score: 7.5 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-1962
Published: 2020-05-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-12790
Published: 2020-05-11
Description: In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://github.com/nystudio107/craft-seomatic/blob/v3/CHANGELOG.md#3249---20200324; https://github.com/nystudio107/craft-seomatic/commit/82f4a25b28fd622393da6592dc9e5ccee7fc5be3#diff-52fd042c50432133a00a8f840f4a6165; https://github.com/nystudio107/craft-seomatic/releases/tag/3.2.49
CVE: CVE-2020-5833
Published: 2020-05-11
Description: Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762; https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE: CVE-2020-5834
Published: 2020-05-11
Description: Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762; https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE: CVE-2020-5835
Published: 2020-05-11
Description: Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762; https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE: CVE-2020-5836
Published: 2020-05-11
Description: Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled.
CVSS Score: 7.8 (HIGH)
References: https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762; https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE: CVE-2020-5837
Published: 2020-05-11
Description: Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762; https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
CVE: CVE-2020-7647
Published: 2020-05-11
Description: All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/jooby-project/jooby/commit/34f526028e6cd0652125baa33936ffb6a8a4a009; https://snyk.io/vuln/SNYK-JAVA-IOJOOBY-568806%2C; https://snyk.io/vuln/SNYK-JAVA-ORGJOOBY-568807%2C
CVE: CVE-2020-9840
Published: 2020-05-11
Description: In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions.
CVSS Score: 7.5 (HIGH)
References: https://github.com/apple/swift-nio-extras/security/advisories/GHSA-xhhr-p2r9-jmm7; https://github.com/apple/swift-nio-extras/security/advisories/GHSA-xhhr-p2r9-jmm7
CVE: CVE-2020-1724
Published: 2020-05-11
Description: A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account manager section.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1724; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1724
CVE: CVE-2017-14200
Published: 2020-05-11
Description: Rejected reason: Unused CVE for 2017
CVE: CVE-2020-10019
Published: 2020-05-11
Description: USB DFU has a potential buffer overflow where the requested length (wLength) is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-120, CWE-120
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10019; https://github.com/zephyrproject-rtos/zephyr/pull/23190; https://github.com/zephyrproject-rtos/zephyr/pull/23457
CVE: CVE-2020-10021
Published: 2020-05-11
Description: Out-of-bounds Write in the USB Mass Storage memoryWrite handler with unaligned Sizes See NCC-ZEP-024, NCC-ZEP-025, NCC-ZEP-026 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787, CWE-787
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10021; https://github.com/zephyrproject-rtos/zephyr/pull/23240; https://github.com/zephyrproject-rtos/zephyr/pull/23455
CVE: CVE-2020-10022
Published: 2020-05-11
Description: A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10022; https://github.com/zephyrproject-rtos/zephyr/pull/24065; https://github.com/zephyrproject-rtos/zephyr/pull/24066
CVE: CVE-2020-10023
Published: 2020-05-11
Description: The shell subsystem contains a buffer overflow, whereby an adversary with physical access to the device is able to cause a memory corruption, resulting in denial of service or possibly code execution within the Zephyr kernel. See NCC-NCC-019 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10023; https://github.com/zephyrproject-rtos/zephyr/pull/23304; https://github.com/zephyrproject-rtos/zephyr/pull/23646
CVE: CVE-2020-10024
Published: 2020-05-11
Description: The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-697, CWE-697
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10024; https://github.com/zephyrproject-rtos/zephyr/pull/23323; https://github.com/zephyrproject-rtos/zephyr/pull/23498
CVE: CVE-2020-10025
Published: 2020-05-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-10067. Reason: This candidate is a reservation duplicate of CVE-2020-10067. Notes: All CVE users should reference CVE-2020-10067 instead of this candidate
CVE: CVE-2020-10026
Published: 2020-05-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-10021. Reason: This candidate is a reservation duplicate of CVE-2020-10021. Notes: All CVE users should reference CVE-2020-10021 instead of this candidate
CVE: CVE-2020-10027
Published: 2020-05-11
Description: An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-697, CWE-697
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10027; https://github.com/zephyrproject-rtos/zephyr/pull/23328; https://github.com/zephyrproject-rtos/zephyr/pull/23499