deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0541
Published: 2020-06-15
Description: Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0542
Published: 2020-06-15
Description: Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access.
CVSS Score: 7.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0543
Published: 2020-06-15
Description: Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-459
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00031.html
CVE: CVE-2020-0545
Published: 2020-06-15
Description: Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 and Intel(R) Server Platform Services (SPS) versions before SPS_E5_04.01.04.380.0, SPS_SoC-X_04.00.04.128.0, SPS_SoC-A_04.00.04.211.0, SPS_E3_04.01.04.109.0, SPS_E3_04.08.04.070.0 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-190
References: https://cert-portal.siemens.com/productcert/pdf/ssa-631949.pdf; https://kc.mcafee.com/corporate/index?page=content&id=SB10321; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0566
Published: 2020-06-15
Description: Improper Access Control in subsystem for Intel(R) TXE versions before 3.175 and 4.0.25 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0586
Published: 2020-06-15
Description: Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10321; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041
CVE: CVE-2020-0594
Published: 2020-06-15
Description: Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0595
Published: 2020-06-15
Description: Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0596
Published: 2020-06-15
Description: Improper input validation in DHCPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-0597
Published: 2020-06-15
Description: Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-14146
Published: 2020-06-15
Description: KumbiaPHP through 1.1.1, in Development mode, allows XSS via the public/pages/kumbia PATH_INFO.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/KumbiaPHP/KumbiaPHP/releases; https://github.com/jenaye/KumbiaPHP-; https://github.com/KumbiaPHP/KumbiaPHP/releases
CVE: CVE-2020-4216
Published: 2020-06-15
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 175066.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175066; https://www.ibm.com/support/pages/node/6221332; https://www.zerodayinitiative.com/advisories/ZDI-20-710/
CVE: CVE-2020-4406
Published: 2020-06-15
Description: IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 179488.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1021
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/179488; https://www.ibm.com/support/pages/node/6221448; https://exchange.xforce.ibmcloud.com/vulnerabilities/179488
CVE: CVE-2020-4469
Published: 2020-06-15
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. This vulnerability is due to an incomplete fix for CVE-2020-4211. IBM X-Force ID: 181724.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181724; https://www.ibm.com/support/pages/node/6221358; https://www.tenable.com/security/research/tra-2020-37
CVE: CVE-2020-4470
Published: 2020-06-15
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which could be execute arbitrary code on the vulnerable server. IBM X-Force ID: 181725.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181725; https://www.ibm.com/support/pages/node/6221358; https://www.tenable.com/security/research/tra-2020-37
CVE: CVE-2020-4471
Published: 2020-06-15
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote server. IBM X-Force ID: 181726.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181726; https://www.ibm.com/support/pages/node/6221358; https://www.tenable.com/security/research/tra-2020-37
CVE: CVE-2020-4477
Published: 2020-06-15
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log file which could be used in further attacks against the system. IBM X-Force ID: 181779.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181779; https://www.ibm.com/support/pages/node/6221388; https://exchange.xforce.ibmcloud.com/vulnerabilities/181779
CVE: CVE-2020-4494
Published: 2020-06-15
Description: IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation which can result in access to unauthorized resources. IBM X-Force ID: 182019.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182019; https://www.ibm.com/support/pages/node/6221448; https://exchange.xforce.ibmcloud.com/vulnerabilities/182019
CVE: CVE-2020-8674
Published: 2020-06-15
Description: Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://support.lenovo.com/de/en/product_security/len-30041; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
CVE: CVE-2020-8675
Published: 2020-06-15
Description: Insufficient control flow management in firmware build and signing tool for Intel(R) Innovation Engine before version 1.0.859 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00366.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00366.html
CVE: CVE-2017-18869
Published: 2020-06-15
Description: A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.
CVSS Score: 2.5 (LOW)
CWE: CWE-367
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863985; https://bugzilla.redhat.com/show_bug.cgi?id=1611614; https://github.com/isaacs/chownr/issues/14
CVE: CVE-2018-16848
Published: 2020-06-15
Description: A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://bugs.launchpad.net/mistral/+bug/1785657; https://bugzilla.redhat.com/show_bug.cgi?id=1645332; https://bugs.launchpad.net/mistral/+bug/1785657
CVE: CVE-2020-14011
Published: 2020-06-15
Description: Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is manually unchecked. This allows command execution via the Add New Package and Scheduled Deployments features.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: http://packetstormsecurity.com/files/158205/Lansweeper-7.2-Default-Account-Remote-Code-Execution.html; https://pastebin.com/EUkMx94X; https://www.lansweeper.com/knowledgebase/restricting-access-to-the-web-console/
CVE: CVE-2020-1813
Published: 2020-06-15
Description: HUAWEI P30 smart phone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. Due to improper authentication of specific interface, in specific scenario attackers could access specific interface without authentication. Successful exploit could allow the attacker to perform unauthorized operations.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-306
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-04-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-04-smartphone-en
CVE: CVE-2020-1825
Published: 2020-06-15
Description: FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service (DoS) vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successful exploit could cause affected devices to be abnormal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-01-fusionacces-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-01-fusionacces-en
CVE: CVE-2020-9075
Published: 2020-06-15
Description: Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory. Successful exploitation of this vulnerability may lead to information leakage.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-validation-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-validation-en
CVE: CVE-2020-9426
Published: 2020-06-15
Description: OX Guard 2.10.3 and earlier allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158069/OX-Guard-2.10.3-Cross-Site-Scripting-Server-Side-Request-Forgery.html; https://seclists.org/fulldisclosure/2020/Jun/20; https://www.open-xchange.com/
CVE: CVE-2020-9427
Published: 2020-06-15
Description: OX Guard 2.10.3 and earlier allows SSRF.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: http://packetstormsecurity.com/files/158069/OX-Guard-2.10.3-Cross-Site-Scripting-Server-Side-Request-Forgery.html; https://seclists.org/fulldisclosure/2020/Jun/20; https://www.open-xchange.com/
CVE: CVE-2020-13150
Published: 2020-06-15
Description: D-link DSL-2750U ISL2750UEME3.V1E devices allow approximately 90 seconds of access to the control panel, after a restart, before MAC address filtering rules become active.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: https://gist.github.com/idris159/4c3ea746f4b19308b8ce8d8a7e313310; https://www.dlink.com/en/security-bulletin; https://gist.github.com/idris159/4c3ea746f4b19308b8ce8d8a7e313310
CVE: CVE-2020-13999
Published: 2020-06-15
Description: ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://libemf.sourceforge.net/index.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/555PIBSHDUZD26UCJ5DHCQ4W7RXEZC66/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVZXYNDM4YOONMXYPW2GTMIS6V6JBIL6/
CVE: CVE-2020-14054
Published: 2020-06-15
Description: SOKKIA GNR5 Vanguard WEB version 1.2 (build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3) and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.hemayate.com/?page_id=3683; http://www.hemayate.com/?page_id=3683
CVE: CVE-2020-3961
Published: 2020-06-15
Description: VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.vmware.com/security/advisories/VMSA-2020-0013.html; https://www.vmware.com/security/advisories/VMSA-2020-0013.html
CVE: CVE-2020-9076
Published: 2020-06-15
Description: HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper authentication vulnerability. Due to the identity of the message sender not being properly verified, an attacker can exploit this vulnerability through man-in-the-middle attack to induce user to access malicious URL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-phone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-phone-en
CVE: CVE-2018-21245
Published: 2020-06-15
Description: Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-444
References: https://admin.hostpoint.ch/pipermail/pound_apsis.ch/2018-May/000054.html; https://bugs.gentoo.org/714084; https://admin.hostpoint.ch/pipermail/pound_apsis.ch/2018-May/000054.html
CVE: CVE-2018-21246
Published: 2020-06-15
Description: Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://bugs.gentoo.org/715214; https://github.com/caddyserver/caddy/releases/tag/v0.10.13; https://bugs.gentoo.org/715214
CVE: CVE-2019-20838
Published: 2020-06-15
Description: libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2020/Dec/32; http://seclists.org/fulldisclosure/2021/Feb/14; https://bugs.gentoo.org/717920
CVE: CVE-2020-14033
Published: 2020-06-15
Description: An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming.c has a Buffer Overflow via a crafted RTSP server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/meetecho/janus-gateway/blob/v0.10.0/plugins/janus_streaming.c#L6117; https://github.com/meetecho/janus-gateway/blob/v0.10.0/plugins/janus_streaming.c#L6166; https://github.com/meetecho/janus-gateway/pull/2229
CVE: CVE-2020-14034
Published: 2020-06-15
Description: An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow via long value in an SDP Offer packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/meetecho/janus-gateway/blob/v0.10.0/utils.c#L381; https://github.com/meetecho/janus-gateway/blob/v0.10.0/utils.c#L401; https://github.com/meetecho/janus-gateway/pull/2229
CVE: CVE-2020-14150
Published: 2020-06-15
Description: GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison.
CVSS Score: 5.5 (MEDIUM)
References: https://bugs.gentoo.org/717936; https://lists.gnu.org/archive/html/info-gnu/2020-04/msg00000.html; https://bugs.gentoo.org/717936
CVE: CVE-2020-14151
Published: 2020-06-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11813. Reason: This candidate is a duplicate of CVE-2018-11813. Notes: All CVE users should reference [ID] instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-14152
Published: 2020-06-15
Description: In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.
CVSS Score: 7.1 (HIGH)
CWE: CWE-400
References: http://www.ijg.org/files/jpegsrc.v9d.tar.gz; https://bugs.gentoo.org/727908; https://lists.debian.org/debian-lts-announce/2020/07/msg00033.html
CVE: CVE-2020-14153
Published: 2020-06-15
Description: In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.ijg.org/files/jpegsrc.v9d.tar.gz; https://bugs.gentoo.org/727908; https://github.com/libjpeg-turbo/libjpeg-turbo/issues/445
CVE: CVE-2020-14154
Published: 2020-06-15
Description: Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.
CVSS Score: 4.8 (MEDIUM)
References: http://lists.mutt.org/pipermail/mutt-announce/Week-of-Mon-20200608/000022.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00070.html
CVE: CVE-2020-14155
Published: 2020-06-15
Description: libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: http://seclists.org/fulldisclosure/2020/Dec/32; http://seclists.org/fulldisclosure/2021/Feb/14; https://about.gitlab.com/releases/2020/07/01/security-release-13-1-2-release/
CVE: CVE-2020-14147
Published: 2020-06-15
Description: An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow. NOTE: this issue exists because of a CVE-2015-8080 regression.
CVSS Score: 7.7 (HIGH)
CWE: CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00058.html; https://github.com/antirez/redis/commit/ef764dde1cca2f25d00686673d1bc[PII_REDACTED]1; https://github.com/antirez/redis/pull/6875
CVE: CVE-2020-14148
Published: 2020-06-15
Description: The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/ngircd/ngircd/issues/274; https://github.com/ngircd/ngircd/issues/277; https://github.com/ngircd/ngircd/pull/275
CVE: CVE-2020-14149
Published: 2020-06-15
Description: In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00052.html; https://bugs.gentoo.org/726308; https://github.com/troglobit/uftpd/issues/30
CVE: CVE-2020-14156
Published: 2020-06-15
Description: user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://github.com/openbmc/openbmc/issues/3670; https://github.com/openbmc/phosphor-host-ipmid/commit/b265455a2518ece7c004b43c144199ec980fc620; https://lists.ozlabs.org/pipermail/openbmc/2020-June/022020.html