rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-12523 Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration
On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource
Problem types: cwe_id: CWE-909
description: CWE-909 Missing Initialization of Resource
Affected products: vendor: Phoenix Contact
product: TC MGUARD RS4000 4G VZW VPN (1010461)
vendor: Phoenix Contact
product: TC MGUARD RS4000 4G ATT VPN (1010463)
vendor: Phoenix Contact
product: FL MGUARD RS4004 TX/DTX (2701876)
vendor: Phoenix Contact
product: FL MGUARD RS4004 TX/DTX VPN (2701877)
vendor: Phoenix Contact
product: TC MGUARD RS4000 3G VPN (2903440)
vendor: Phoenix Contact
product: TC MGUARD RS4000 4G VPN (2903586)
vendor: Innominate
product: Innominate mGuard rs4000 4TX/TX
vendor: Innominate
product: Innominate mGuard rs4000 4TX/TX VPN
vendor: Innominate
product: Innominate mGuard rs4000 4TX/3G/TX VPN
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
version: 3.1
Credits: lang: en
value: Discovered by SMST Designers & Constructors B.V., Phoenix Contact reported to CERT@VDE
Published: 2020-12-17T22:43:14.788Z
CVE-2020-12524 Phoenix Contact BTP Touch Panels uncontrolled resource consumption
Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).
Problem types: cwe_id: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
Affected products: vendor: Phoenix Contact
product: BTP Touch Panel
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: This vulnerability was discovered by Richard Thomas and Tom Chothia of University of Birmingham.
Published: 2020-12-02T14:39:20.197Z
CVE-2020-12525 WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: M&M Software
product: fdtCONTAINER Component
vendor: M&M Software
product: fdtCONTAINER Application
vendor: M&M Software
product: dtmlINSPECTOR
vendor: Pepperl+Fuchs/PACTware
product: PACTware
vendor: Weidmüller
product: WI Manager
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Reported by a customer of the fdtCONTAINER component. Coordinated by CERT@VDE
Published: 2021-01-22T19:01:56.886Z
CVE-2020-12526 BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server
TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Beckhoff
product: TwinCAT OPC UA Server
vendor: Beckhoff
product: IPC Diagnostics UA Server
vendor: Beckhoff
product: TF6100
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Beckhoff Automation thanks Industrial Control Security Laboratory of QI-ANXIN Technology Group Inc. from China for reporting the issue and for support and efforts with the coordinated disclosure. Also Beckhoff Automation thanks CERT@VDE for coordination.
Published: 2021-05-13T13:45:24.098Z
CVE-2020-12527 Improper Access Validation in products of MB connect line and Helmholz
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions.
Problem types: cwe_id: CWE-269
description: CWE-269 Improper Privilege Management
Affected products: vendor: MB connect line
product: mymbCONNECT24
vendor: MB connect line
product: mbCONNECT24
vendor: Helmholz
product: myREX24
vendor: Helmholz
product: myREX24.virtual
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: OTORIO reported the vulnerabilities to MB connect line. CERT@VDE coordinated.
Published: 2021-03-02T21:15:24.885Z
CVE-2020-12528 
An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to.
Problem types: cwe_id: CWE-269
description: CWE-269 Improper Privilege Management
Affected products: vendor: MB connect line
product: mymbCONNECT24
vendor: MB connect line
product: mbCONNECT24
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: OTORIO reported the vulnerabilities to MB connect line. CERT@VDE coordinated.
Published: 2021-03-02T21:15:25.048Z
CVE-2020-12529 
An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: MB connect line
product: mymbCONNECT24
vendor: MB connect line
product: mbCONNECT24
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.8
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
version: 3.1
Credits: lang: en
value: OTORIO reported the vulnerabilities to MB connect line. CERT@VDE coordinated.
Published: 2021-03-02T21:15:25.155Z
CVE-2020-12530 
An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: MB connect line
product: mymbCONNECT24
vendor: MB connect line
product: mbCONNECT24
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: OTORIO reported the vulnerabilities to MB connect line. CERT@VDE coordinated.
Published: 2021-03-02T21:15:25.258Z
CVE-2020-12593 
Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: Symantec Endpoint Detection & Response (SEDR)
Published: 2020-11-18T22:40:41.000Z
CVE-2020-12594 
A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4.
Problem types: description: Privilege escalation
Affected products: vendor: n/a
product: Symantec Messaging Gateway (SMG)
Published: 2020-12-10T05:21:46.000Z
CVE-2020-12595 
An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Symantec Messaging Gateway (SMG)
Published: 2020-12-10T05:21:49.000Z
CVE-2020-12603 
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small (i.e. 1 byte) data frames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T13:53:19.000Z
CVE-2020-12604 
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough window updates to consume the entire stream and does not reset the stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T14:24:49.000Z
CVE-2020-12605 
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T14:33:47.000Z
CVE-2020-12606 
An issue was discovered in DB Soft SGLAC before 20.05.001. The ProcedimientoGenerico method in the SVCManejador.svc webservice of the SGLAC web frontend allows an attacker to run arbitrary SQL commands on the SQL Server. Command execution can be easily achieved by using the xp_cmdshell stored procedure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-17T13:17:39.000Z
CVE-2020-12607 
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a usability problem. There are some threat models where an attacker can benefit by successfully guessing users for whom signature verification will fail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-02T21:00:52.000Z
CVE-2020-12608 
An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-07T16:29:23.000Z
CVE-2020-12612 
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevate, it can typically be found within the Program Files (x86) folder and therefore uses the %ProgramFiles(x86)% environment variable. However, when this same policy gets pushed to a 32bit machine, this environment variable does not exist. Therefore, since the standard user can create a user level environment variable, they can repoint this variable to any folder the user has full control of. Then, the folder structure can be created in such a way that a rule matches and arbitrary code runs elevated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-12T00:00:00.000Z
CVE-2020-12613 
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker can spawn a process with multiple users as part of the security token (prior to Avecto elevation). When Avecto elevates the process, it removes the user who is launching the process, but not the second user. Therefore this second user still retains access and can give permission to the process back to the first user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-11T00:00:00.000Z
CVE-2020-12614 
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is protected by this criteria, it can be leveraged by a malicious actor to achieve Elevation of Privileges from standard user to administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-12T00:00:00.000Z
CVE-2020-12615 
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-12T00:00:00.000Z
CVE-2020-12618 
eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the attacker to decipher further communication. The entire attack could be accomplished by sending a single email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-20T22:48:25.000Z
CVE-2020-12619 
MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enabled the attacker to decipher further communication. The entire attack could be accomplished by sending a single email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-20T22:44:46.000Z
CVE-2020-12620 
Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection (shell metacharacters after an IP address).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-30T13:03:37.000Z
CVE-2020-12621 
The Teamwire application 5.3.0 for Android allows physically proximate attackers to exploit a flaw related to the pass-code component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-02T16:27:32.000Z
CVE-2020-12624 
The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp object is reused, which allows remote attackers to hijack sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-03T13:01:33.000Z
CVE-2020-12625 
An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T01:57:31.000Z
CVE-2020-12626 
An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T01:57:17.000Z
CVE-2020-12627 
Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T02:16:06.000Z
CVE-2020-12629 
include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T12:28:46.000Z
CVE-2020-12635 
XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T13:08:23.000Z
CVE-2020-12637 
Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-09T16:23:46.000Z
CVE-2020-12638 
An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTOS_SDK devices through 3.3. Broadcasting forged beacon frames forces a device to change its authentication mode to OPEN, effectively disabling its 802.11 encryption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-23T15:41:58.000Z
CVE-2020-12639 
phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T13:36:59.000Z
CVE-2020-12640 
Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T14:58:28.000Z
CVE-2020-12641 
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T14:58:15.000Z
CVE-2020-12642 
An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-04T15:14:14.000Z
CVE-2020-12643 
OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T14:24:01.000Z
CVE-2020-12644 
OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T14:25:38.000Z
CVE-2020-12645 
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T14:28:16.000Z
CVE-2020-12646 
OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T14:30:03.000Z
CVE-2020-12647 
Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumstances related to syntax. The resulting code could, for example, trigger a system fault or adversely affect confidentiality, integrity, and availability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-21T02:07:14.000Z
CVE-2020-12648 
A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-14T13:52:29.000Z
CVE-2020-12649 
Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T00:09:06.000Z
CVE-2020-12651 
SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line number to CSI functions that exceeds INT_MAX.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-15T17:31:50.000Z
CVE-2020-12652 
The __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation and trigger a race condition, i.e., a "double fetch" vulnerability, aka CID-28d76df18f0a. NOTE: the vendor states "The security impact of this bug is not as bad as it could have been because these operations are all privileged and root already has enormous destructive power."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T04:23:59.000Z
CVE-2020-12653 
An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T04:47:35.000Z
CVE-2020-12654 
An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T04:47:48.000Z
CVE-2020-12655 
An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T05:16:02.000Z
CVE-2020-12656 
gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked, but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-05-05T05:42:21.000Z