rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-25637 
A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-415
description: CWE-415
Affected products: vendor: n/a
product: libvirt
Published: 2020-10-06T00:00:00.000Z
CVE-2020-25638 
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
Problem types: cwe_id: CWE-89
description: CWE-89
Affected products: vendor: n/a
product: hibernate-core
Published: 2020-12-02T14:36:24.000Z
CVE-2020-25639 
A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: kernel
Published: 2021-03-04T21:56:28.000Z
CVE-2020-25640 
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.
Problem types: cwe_id: CWE-209
description: (CWE-209|CWE-532)
Affected products: vendor: n/a
product: wildfly
Published: 2020-11-24T19:00:33.000Z
CVE-2020-25641 
A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-835
description: CWE-835
Affected products: vendor: n/a
product: kernel
Published: 2020-10-06T13:33:22.000Z
CVE-2020-25643 
A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: kernel
Published: 2020-10-06T00:00:00.000Z
CVE-2020-25644 
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: n/a
product: wildfly-openssl
Published: 2020-10-06T00:00:00.000Z
CVE-2020-25645 
A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-319
description: CWE-319
Affected products: vendor: n/a
product: kernel
Published: 2020-10-13T19:52:35.000Z
CVE-2020-25646 
A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private key in logs. This directly impacts confidentiality
Problem types: cwe_id: CWE-117
description: CWE-117
Affected products: vendor: Ansible Community
product: Community Collections
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-10-29T19:44:46.000Z
CVE-2020-25647 
A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the Secure Boot mechanism. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: grub2
Published: 2021-03-03T16:40:42.000Z
CVE-2020-25648 
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: n/a
product: nss
Published: 2020-10-20T00:00:00.000Z
CVE-2020-25649 
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
Problem types: cwe_id: CWE-611
description: CWE-611
Affected products: vendor: n/a
product: jackson-databind
Published: 2020-12-03T16:16:50.000Z
CVE-2020-25650 
A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local guest user with access to the UNIX domain socket path `/run/spice-vdagentd/spice-vdagent-sock` could use this flaw to perform a memory denial of service for spice-vdagentd or even other processes in the VM system. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and previous versions.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: n/a
product: spice-vdagent
Published: 2020-11-25T14:35:01.000Z
CVE-2020-25651 
A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users could also be interrupted, resulting in a denial of service. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.
Problem types: cwe_id: CWE-362
description: CWE-362->CWE-200
Affected products: vendor: n/a
product: spice-vdagent
Published: 2020-11-26T01:18:45.000Z
CVE-2020-25652 
A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in `/run/spice-vdagentd/spice-vdagent-sock`. Any unprivileged local guest user could use this flaw to prevent legitimate agents from connecting to the spice-vdagentd daemon, resulting in a denial of service. The highest threat from this vulnerability is to system availability. This flaw affects spice-vdagent versions 0.20 and prior.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: n/a
product: spice-vdagent
Published: 2020-11-26T01:28:54.000Z
CVE-2020-25653 
A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest user to become the active agent for spice-vdagentd, possibly resulting in a denial of service or information leakage from the host. The highest threat from this vulnerability is to data confidentiality as well as system availability. This flaw affects spice-vdagent versions 0.20 and prior.
Problem types: cwe_id: CWE-362
description: CWE-362->CWE-200
Affected products: vendor: n/a
product: spice-vdagent
Published: 2020-11-26T01:23:16.000Z
CVE-2020-25654 
An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: n/a
product: pacemaker
Published: 2020-11-24T00:00:00.000Z
CVE-2020-25655 
An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a short time to users with only view permission. In this short time window the user with view permission could read cluster secrets that should only be disclosed to admin users.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: Red Hat
product: open-cluster-management
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-11-09T14:38:34.000Z
CVE-2020-25656 
A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: kernel
Published: 2020-12-02T00:00:00.000Z
CVE-2020-25657 
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
Problem types: cwe_id: CWE-385
description: CWE-385
Affected products: vendor: n/a
product: m2crypto
Published: 2021-01-12T14:33:02.000Z
CVE-2020-25658 
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
Problem types: cwe_id: CWE-385
description: CWE-385
Affected products: vendor: Sybren A. Stüvel
product: python-rsa
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-11-12T13:48:31.000Z
CVE-2020-25659 
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
Problem types: cwe_id: CWE-385
description: CWE-385
Affected products: vendor: n/a
product: python-cryptography
Published: 2021-01-11T15:37:29.000Z
CVE-2020-25660 
A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.
Problem types: cwe_id: CWE-294
description: CWE-294
Affected products: vendor: n/a
product: ceph
Published: 2020-11-23T21:18:28.000Z
CVE-2020-25661 
A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Problem types: cwe_id: CWE-843
description: CWE-843
Affected products: vendor: Red Hat
product: kernel
CVSS v3.1: attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2020-11-05T20:04:04.000Z
CVE-2020-25662 
A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-284
description: CWE-284
cwe_id: CWE-665
description: CWE-665
Affected products: vendor: Red Hat
product: kernel
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: ADJACENT_NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
Published: 2020-11-05T00:00:00.000Z
CVE-2020-25663 
A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed() or GetPixelBlue() was called. This could occur if an attacker is able to submit a malicious image file to be processed by ImageMagick and could lead to denial of service. It likely would not lead to anything further because the memory is used as pixel data and not e.g. a function pointer. This flaw affects ImageMagick versions prior to 7.0.9-0.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: ImageMagick
Published: 2020-12-08T20:57:39.000Z
CVE-2020-25664 
In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.
Problem types: cwe_id: CWE-122
description: CWE-122->CWE-787
Affected products: vendor: n/a
product: ImageMagick
Published: 2020-12-08T20:57:44.000Z
CVE-2020-25665 
The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.
Problem types: cwe_id: CWE-122
description: CWE-122->CWE-125
Affected products: vendor: n/a
product: ImageMagick
Published: 2020-12-08T00:00:00.000Z
CVE-2020-25666 
There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and `count` value for a color. The patch uses casts to `ssize_t` type for these calculations, instead of `int`. This flaw could impact application reliability in the event that ImageMagick processes a crafted input file. This flaw affects ImageMagick versions prior to 7.0.9-0.
Problem types: cwe_id: CWE-190
description: CWE-190
Affected products: vendor: n/a
product: ImageMagick
Published: 2020-12-08T00:00:00.000Z
CVE-2020-25667 
TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.
Problem types: cwe_id: CWE-122
description: CWE-122->CWE-125
Affected products: vendor: n/a
product: ImageMagick
Published: 2020-12-08T20:57:59.000Z
CVE-2020-25668 
A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
Problem types: cwe_id: CWE-362
description: CWE-362 -> CWE-416
Affected products: vendor: n/a
product: Linux Kernel
Published: 2021-05-26T11:11:04.000Z
CVE-2020-25669 
A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: Linux Kernel
Published: 2021-05-26T11:25:08.000Z
CVE-2020-25670 
A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: Linux Kernel
Published: 2021-05-26T10:28:52.000Z
CVE-2020-25671 
A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: Linux Kernel
Published: 2021-05-26T10:44:17.000Z
CVE-2020-25672 
A memory leak vulnerability was found in Linux kernel in llcp_sock_connect
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: n/a
product: Linux Kernel
Published: 2021-05-25T19:38:35.000Z
CVE-2020-25673 
A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: Linux Kernel
Published: 2021-05-26T10:55:54.000Z
CVE-2020-25674 
WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow. This occurs because it is possible for the colormap to have less than 256 valid values but the loop condition will loop 256 times, attempting to pass invalid colormap data to the event logger. The patch replaces the hardcoded 256 value with a call to MagickMin() to ensure the proper value is used. This could impact application availability when a specially crafted input file is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.
Problem types: cwe_id: CWE-122
description: CWE-122->CWE-125
Affected products: vendor: n/a
product: ImageMagick
Published: 2020-12-08T00:00:00.000Z
CVE-2020-25675 
In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a negative impact to application availability or other problems related to undefined behavior, in cases where ImageMagick processes untrusted input data. The upstream patch introduces functionality to constrain the pixel offsets and prevent these issues. This flaw affects ImageMagick versions prior to 7.0.9-0.
Problem types: cwe_id: CWE-190
description: CWE-190
Affected products: vendor: n/a
product: ImageMagick
Published: 2020-12-08T00:00:00.000Z
CVE-2020-25676 
In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
Problem types: cwe_id: CWE-190
description: CWE-190
Affected products: vendor: n/a
product: ImageMagick
Published: 2020-12-08T00:00:00.000Z
CVE-2020-25677 
A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality.
Problem types: cwe_id: CWE-312
description: CWE-312
Affected products: vendor: n/a
product: ceph-ansible
Published: 2020-12-08T00:02:25.000Z
CVE-2020-25678 
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible.
Problem types: cwe_id: CWE-312
description: CWE-312
Affected products: vendor: n/a
product: ceph
Published: 2021-01-08T17:59:34.000Z
CVE-2020-25680 
A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'. The validation of the certificate whether CN and hostname are matching stopped working and allow connecting to the back-end work. The highest threat from this vulnerability is to data integrity.
Problem types: cwe_id: CWE-295
description: CWE-295
Affected products: vendor: n/a
product: JBCS httpd
Published: 2021-01-07T17:32:50.000Z
CVE-2020-25681 
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: n/a
product: dnsmasq
Published: 2021-01-20T16:36:41.000Z