huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2020-13396: freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.
Component: freerdp
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Public date: 2020-05-22T00:00:00+00:00

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.


Affected upstream versions: n/a
Fixed upstream versions: 3.0.0
Upstream repository: https://github.com/FreeRDP/FreeRDP
Upstream fix commit: 8fb6336a4072abcee8ce5bd6ae91104628c7bb69
CVE-2020-13397: freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c
Component: freerdp
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 6.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Public date: 2020-05-22T00:00:00+00:00

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.


Affected upstream versions: n/a
Fixed upstream versions: 3.0.0
Upstream repository: https://github.com/FreeRDP/FreeRDP
Upstream fix commit: 8fb6336a4072abcee8ce5bd6ae91104628c7bb69
CVE-2020-13398: freerdp: Out-of-bounds write in crypto_rsa_common in libfreerdp/crypto/crypto.c
Component: freerdp
Severity: Important
CWE: CWE-805 (Buffer Access with Incorrect Length Value)
CVSS v3: 8.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)
Public date: 2020-05-22T00:00:00+00:00

An issue was found in freerdp's libfreerdp/crypto/crypto.c, in versions before 2.1.1, where buffer access with an incorrect length value, leads to an out-of-bounds write. This flaw allows a remote, unauthenticated, attacker running an RDP server, or a local attacker, using a specially crafted certificate, to cause an out-of-bounds write into client process memory, corrupting the integrity of the data used in the RSA encryption functionality, or causing a denial of service.


Affected upstream versions: n/a
Fixed upstream versions: 3.0.0
Upstream repository: https://github.com/FreeRDP/FreeRDP
Upstream fix commit: 8fb6336a4072abcee8ce5bd6ae91104628c7bb69
CVE-2020-13692: postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML
Component: postgresql-jdbc
Severity: Important
CWE: CWE-611 (Improper Restriction of XML External Entity Reference)
CVSS v3: 8.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Public date: 2020-06-04T00:00:00+00:00

A flaw was found in PostgreSQL JDBC in versions prior to 42.2.13. An XML External Entity (XXE) weakness was found in PostgreSQL JDBC. The highest threat from this vulnerability is to data confidentiality and system availability.


Affected upstream versions: n/a
Fixed upstream versions: REL42.2.13
Upstream repository: https://github.com/pgjdbc/pgjdbc
Upstream fix commit: 14b62aca4764d496813f55a43d050b017e01eb65
CVE-2020-13765: QEMU: loader: OOB access while loading registered ROM may lead to code execution
Component: QEMU
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 5.6 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Public date: 2020-05-12T00:00:00+00:00

An out-of-bound write access flaw was found in the way QEMU loads ROM contents at boot time. This flaw occurs in the rom_copy() routine while loading the contents of a 32-bit -kernel image into memory. Running an untrusted -kernel image may load contents at arbitrary memory locations, potentially leading to code execution with the privileges of the QEMU process.

Statement: In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP qemu-kvm-rhev package.

Affected upstream versions: n/a
Fixed upstream versions: v4.2.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: e423455c4f23a1a828901c78fe6d03b7dde79319
CVE-2020-13790: libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c
Component: libjpeg-turbo
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Public date: 2020-05-25T00:00:00+00:00

A vulnerability was found in libjpeg-turbo, where a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.

Statement: This vulnerability is rated as a moderate because a heap-based buffer over-read exists in the get_rgb_row() function within rdppm.c when processing a malformed PPM input file, this issue may lead to information leakage or crashes, it does not inherently allow code execution or privilege escalation.

Affected upstream versions: n/a
Fixed upstream versions: 2.0.5
Upstream repository: https://github.com/libjpeg-turbo/libjpeg-turbo
Upstream fix commit: 3de15e0c344d11d4b90f4a47136467053eb2d09a
CVE-2020-13974: kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c
Component: kernel
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-03-22T00:00:00+00:00

A flaw integer overflow in the Linux kernel's virtual terminal keyboard driver was found in the way the user sends some specific keyboard code multiple times. A local user could use this flaw to crash the system or possibly escalate their privileges on the system.

Statement: No code depends on this integer overflow so it is unlikely that the vulnerability can be used for anything apart from crashing the system. The impact has been reduced to Moderate from Important based on this analysis.

Affected upstream versions: n/a
Fixed upstream versions: v5.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: b86dab054059b970111b5516ae548efaae5b3aae
CVE-2020-14145: openssh: Observable discrepancy leading to an information leak in the algorithm negotiation
Component: openssh
Severity: Moderate
CWE: CWE-203 (Observable Discrepancy)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2020-06-29T00:00:00+00:00

A flaw was found in OpenSSH in versions 5.7 through 8.3, where an Observable Discrepancy occurs and leads to an information leak in the algorithm negotiation. This flaw allows a man-in-the-middle attacker to target initial connection attempts, where there is no host key for the server that has been cached by the client.

Statement: This is a flaw in OpenSSH, which allows a man in the middle attack to determine, if a client already has prior knowledge of the remote hosts fingerprint. An attacker could use this information to ignore clients, which will show an error message during an man in the middle attack, while new clients can be intercepted without alerting them of the man in the middle attack.

This essentially means that this flaw can help attacker's identify targets an MITM attack. However such a attack would still require the attacker to either have control over DNS or control over the network traffic.

If the network is untrusted, Red Hat suggests the use ssh certificates for even more confidence and less human factor involved or gssapi key exchange, where kerberos is used to verify identity of the server.

Affected upstream versions: n/a
Fixed upstream versions: V_8_4_P1
Upstream repository: https://anongit.mindrot.org/openssh.git
Upstream fix commit: b3855ff053f5078ec3d3c653cdaedefaa5fc362d
CVE-2020-14314: kernel: buffer uses out of index in ext3/4 filesystem
Component: kernel
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-06-05T16:45:00+00:00

A memory out-of-bounds read flaw was found in the Linux kernel's ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability.


Affected upstream versions: before 5.9-rc2
Fixed upstream versions: v5.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 5872331b3d91820e14716632ebb56b1399b34fe1
CVE-2020-14373: ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS
Component: ghostscript
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-09-02T07:00:00+00:00

A use-after-free flaw was found in igc_reloc_struct_ptr() of psi/igc.c of Ghostscript-9.25. This flaw allows a local attacker to supply a specially crafted PDF file, causing a denial of service. The highest threat from this vulnerability is to system availability.


Affected upstream versions: 9.25
Fixed upstream versions: gpdf_gs_text_filter_000
Upstream repository: https://git.ghostscript.com/ghostpdl.git
Upstream fix commit: ece5cbbd9979cd35737b00e68267762d72feb2ea
CVE-2020-14381: kernel: referencing inode of removed superblock in get_futex_key() causes UAF
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 6.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Public date: 2020-05-07T19:00:00+00:00

A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.


Affected upstream versions: Linux kernel 5.6-rc6
Fixed upstream versions: v5.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 8019ad13ef7f64be44d4f892af9c840179009254
CVE-2020-14385: kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt
Component: kernel
Severity: Important
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
CVSS v3: 6.2 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-08-25T09:00:00+00:00

A flaw was found in the Linux kernel. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt.  This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.

Statement: Only local users, including unprivileged users in a cointainer, can trigger this flaw. However, the impact could be high, especially on multi-tenant systems, because after the attack the system rendered inaccessible for some time (at least until reboot), so the impact has been increased to Important.

Affected upstream versions: before 5.9-rc4
Fixed upstream versions: v5.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: f4020438fab05364018c91f7e02ebdd192085933
CVE-2020-14386: kernel: memory corruption in net/packet/af_packet.c leads to elevation of privilege
Component: kernel
Severity: Important
CWE: CWE-786 (Access of Memory Location Before Start of Buffer)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-09-03T00:00:00+00:00

A flaw was found in the Linux kernel. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Statement: Only local users with CAP_NET_RAW capability enabled can trigger this issue.

For OpenShift Container Platform 4, pods in the default restricted SCC are granted CAP_NET_RAW by default. An attacker can exploit this if they can run arbitrary container images on the target cluster.

Affected upstream versions: before 5.9-rc4
Fixed upstream versions: v5.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: acf69c946233259ab4d64f8869d4037a198c7f06
CVE-2020-14397: libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference
Component: libvncserver
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-06-17T00:00:00+00:00

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.


Affected upstream versions: n/a
Fixed upstream versions: LibVNCServer-0.9.13
Upstream repository: https://github.com/LibVNC/libvncserver
Upstream fix commit: 38e98ee61d74f5f5ab4aa4c77146faad1962d6d0
CVE-2020-14405: libvncserver: libvncclient/rfbproto.c does not limit TextChat size
Component: libvncserver
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-06-17T00:00:00+00:00

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.


Affected upstream versions: n/a
Fixed upstream versions: LibVNCServer-0.9.13
Upstream repository: https://github.com/LibVNC/libvncserver
Upstream fix commit: 8937203441ee241c4ace85da687b7d6633a12365
CVE-2020-14928: evolution-data-server: Response injection via STARTTLS in SMTP and POP3
Component: evolution-data-server
Severity: Low
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)
Public date: 2020-07-04T00:00:00+00:00

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."


Affected upstream versions: n/a
Fixed upstream versions: 3.37.3
Upstream repository: https://gitlab.gnome.org/GNOME//evolution-data-server
Upstream fix commit: ba82be72cfd427b5d72ff21f929b3a6d8529c4df
CVE-2020-15095: npm: sensitive information exposure through logs
Component: npm
Severity: Moderate
CWE: CWE-532 (Insertion of Sensitive Information into Log File)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)
Public date: 2020-07-07T00:00:00+00:00

Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like "<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>". The password value is not redacted and is printed to stdout and also to any generated log files.


Affected upstream versions: < 6.14.6
Fixed upstream versions: libnpmfund@3.0.0
Upstream repository: https://github.com/npm/cli
Upstream fix commit: a9857b8f6869451ff058789c4631fadfde5bbcbc
CVE-2020-15250: junit4: TemporaryFolder is shared between all users across system which could result in information disclosure
Component: junit4
Severity: Low
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2020-10-12T00:00:00+00:00

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system. This vulnerability does not allow other users to overwrite the contents of these directories or files. This is purely an information disclosure vulnerability. This vulnerability impacts you if the JUnit tests write sensitive information, like API keys or passwords, into the temporary folder, and the JUnit tests execute in an environment where the OS has other untrusted users. Because certain JDK file system APIs were only added in JDK 1.7, this this fix is dependent upon the version of the JDK you are using. For Java 1.7 and higher users: this vulnerability is fixed in 4.13.1. For Java 1.6 and lower users: no patch is available, you must use the workaround below. If you are unable to patch, or are stuck running on Java 1.6, specifying the `java.io.tmpdir` system environment variable to a directory that is exclusively owned by the executing user will fix this vulnerability. For more information, including an example of vulnerable code, see the referenced GitHub Security Advisory.


Affected upstream versions: < 4.13.1
Fixed upstream versions: r4.13.1
Upstream repository: https://github.com/junit-team/junit4
Upstream fix commit: 610155b8c22138329f0723eec22521627dbc52ae
CVE-2020-15257: containerd: unrestricted access to abstract Unix domain socket can lead to privileges escalation
Component: containerd
Severity: Important
CWE: CWE-269 (Improper Privilege Management)
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-11-30T00:00:00+00:00

A flaw was found in containerd. Access controls for the shim's API socket verified that a connecting process had an effective UID of 0, but otherwise did not restrict access to the abstract Unix domain socket. This could allow malicious containers running in the same network namespace as the shim, with an effective UID of 0 but otherwise reduced privileges, to cause new processes to be run with elevated privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Statement: * The container runtime in OpenShift Container Platform 4 is cri-o which is not affected by this flaw. It doesn't make use of abstract unix sockets like containerd, which lead to this vulnerability being possible.

* Red Hat Advanced Cluster Management for Kubernetes is not affected by this flaw.  While containerd is included in the multicloud-operators-subscription image as a dependency of helm, it is not used in any way that exposes the abstract unix socket that is involved in this vulnerability.

* The container-tools module in Red Hat Enterprise Linux is not affected by this flaw as these packages do not use abstract unix sockets for container management.

* For Red Hat OpenStack Platform, because containerd is not actually used in director-operator, the RHOSP Impact has been moved to Low.

Affected upstream versions: < 1.3.9, >= 1.4.0, < 1.4.3
Fixed upstream versions: v1.5.0
Upstream repository: https://github.com/containerd/containerd
Upstream fix commit: 4a4bb851f5da563ff6e68a83dc837c7699c469ad
CVE-2020-15503: LibRaw: lack of thumbnail size range check can lead to buffer overflow
Component: LibRaw
Severity: Moderate
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2020-06-22T00:00:00+00:00

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.

Statement: While the vulnerable code exists in versions of LibRaw shipped with Red Hat Enterprise Linux 7 and 8, LibRaw is not used in services which accept data directly from a network, reducing impact.

Affected upstream versions: n/a
Fixed upstream versions: 0.20.0
Upstream repository: https://github.com/LibRaw/LibRaw
Upstream fix commit: 20ad21c0d87ca80217aee47533d91e633ce1864d
CVE-2020-15720: pki: Dogtag's python client does not validate certificates
Component: pki
Severity: Moderate
CWE: CWE-295 (Improper Certificate Validation)
CVSS v3: 6.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Public date: 2020-06-23T00:00:00+00:00

A flaw was found in PKI, where the dogtag's pki.client.PKIConnection class disables the python-requests certificate validation. This flaw allows an attacker to intercept a connection between a FreeIPA client and a server, and execute an active Man-in-the-Middle attack. The highest threat from this vulnerability is to confidentiality and integrity.

Statement: In PKI, the pki.client.PKIConnection python class is used by the `pki-server` and `pkispawn` commands. `pki-server` runs locally on the server, thus not subject to a Person in the Middle attack. `pkispawn` may access remote node in decentralized or cloned contexts.

Identity Management (IPA) command line interface (the vault related sub-commands) may call pki.client.PKIConnection().

Affected upstream versions: n/a
Fixed upstream versions: v10.9.0
Upstream repository: https://github.com/dogtagpki/pki
Upstream fix commit: 50c23ec146ee9abf28c9de87a5f7787d495f0b72
CVE-2020-15780: kernel: lockdown: bypass through ACPI write via acpi_configfs
Component: kernel
Severity: Moderate
CWE: CWE-284 (Improper Access Control)
CVSS v3: 6.4 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-06-15T00:00:00+00:00

A flaw was found in how the ACPI table loading through acpi_configfs was handled when the kernel was locked down. This flaw allows a (root) privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Statement: This issue is rated as having Moderate impact because of the privileges required for exploitation.

Affected upstream versions: n/a
Fixed upstream versions: v5.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 75b0cea7bf307f362057cc778efe89af4c615354
CVE-2020-15862: net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution
Component: net-snmp
Severity: Important
CWE: CWE-250 (Execution with Unnecessary Privileges)
CVSS v3: 8.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Public date: 2020-08-25T00:00:00+00:00

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.


Affected upstream versions: n/a
Fixed upstream versions: debian/5.8+dfsg-4
Upstream repository: https://salsa.debian.org/debian/net-snmp
Upstream fix commit: fad8725402752746daf0a751dcff19eb6aeab52e
CVE-2020-16117: evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server
Component: evolution-data-server
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-07-30T00:00:00+00:00

A NULL pointer dereference flaw was found in the GNOME evolution-data-server when a mail client parses invalid messages from a malicious server. This flaw allows an attacker who controls a mail server the ability to crash the mail clients. The highest threat from this vulnerability is to system availability.

Statement: The flaw requires a malicious server and it can at most make the client application crash, without additional damage to the client's data or system.

Affected upstream versions: n/a
Fixed upstream versions: 3.35.91
Upstream repository: https://gitlab.gnome.org/GNOME/evolution-data-server
Upstream fix commit: 2cc39592b532cf0dc994fd3694b8e6bf924c9ab5
CVE-2020-16166: kernel: information exposure in drivers/char/random.c and kernel/time/timer.c
Component: kernel
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 3.7 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2020-07-29T00:00:00+00:00

A flaw was found in the Linux kernel. The generation of the device ID from the network RNG internal state is predictable. The highest threat from this vulnerability is to data confidentiality.


Affected upstream versions: n/a
Fixed upstream versions: v5.8
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: f227e3ec3b5cad859ad15666874405e8c1bbc1d4