Browse CVEs

MEDIUM 6.5 CVE-2020-4030 In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. T… Fedora 2.1.2+ Fix from $1,6002020-06-22 MEDIUM 6.5 CVE-2020-4033 In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are a… Fedora 2.1.2+ Fix from $1,6002020-06-22 MEDIUM 6.5 CVE-2020-11096 In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with … Fedora 2.1.2+ Fix from $1,6002020-06-22 MEDIUM 5.4 CVE-2020-11097 In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the stati… Fedora 2.1.2+ Fix from $1,6002020-06-22 MEDIUM 6.5 CVE-2020-11098 In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enable… Fedora 2.1.2+ Fix from $1,6002020-06-22 MEDIUM 6.5 CVE-2020-11099 In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead … Fedora 2.1.2+ Fix from $1,6002020-06-22 MEDIUM 5.4 CVE-2020-11095 In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the stati… Fedora 2.1.2+ Fix from $1,6002020-06-22 CRITICAL 9.1 CVE-2020-3658 Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdrag… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.1 CVE-2020-12886 A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The fu… Mbed Os Patch available Fix from $2,3002020-06-18 CRITICAL 9.1 CVE-2020-12883 Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The fu… Mbed Os Patch available Fix from $2,3002020-06-18 CRITICAL 9.1 CVE-2020-12884 A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The fu… Mbed Os Patch available Fix from $2,3002020-06-18 MEDIUM 5.3 CVE-2020-11910EPSS 11% The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read. Tcp\/ip 6.0.1.66+ Fix from $1,6002020-06-17 MEDIUM 5.3 CVE-2020-11912 The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read. Tcp\/ip 6.0.1.66+ Fix from $1,6002020-06-17 MEDIUM 5.3 CVE-2020-11913 The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. Tcp\/ip 6.0.1.66+ Fix from $1,6002020-06-17 MEDIUM 5.4 CVE-2020-11899 KEVEPSS 19% The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. Tcp\/ip 6.0.1.66+ Fix from $1,6002020-06-17 CRITICAL 9.0 CVE-2020-11901EPSS 21% The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response. Tcp\/ip 6.0.1.66+ Fix from $2,3002020-06-17 HIGH 7.3 CVE-2020-11902EPSS 9% The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read. Tcp\/ip 6.0.1.66+ Fix from $1,9502020-06-17 MEDIUM 6.5 CVE-2020-11903 The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read. Tcp\/ip 6.0.1.28+ Fix from $1,6002020-06-17 MEDIUM 6.5 CVE-2020-11905 The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read. Tcp\/ip 6.0.1.66+ Fix from $1,6002020-06-17 HIGH 7.5 CVE-2020-14163 An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case wh… Jerryscript Patch available Fix from $1,9502020-06-15 HIGH 7.5 CVE-2020-14148 The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function. Debian Linux after 25.0 Fix from $1,9502020-06-15 HIGH 7.1 CVE-2020-14153 In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers. Libjpeg after 9c Fix from $1,9502020-06-15 HIGH 7.5 CVE-2019-20838 libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related… Pcre 8.2.12 / 8.43+ Fix from $1,9502020-06-15 MEDIUM 5.3 CVE-2020-8674 Out-of-bounds read in DHCPv6 subsystem in Intel(R) AMT and Intel(R)ISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an … Active Management Technology Firmware 11.8.77 / 11.12.77+ Fix from $1,6002020-06-15 CRITICAL 9.8 CVE-2020-0594 Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenti… Active Management Technology Firmware 11.8.77 / 11.12.77+ Fix from $2,3002020-06-15 HIGH 7.5 CVE-2020-0597 Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 14.0.33 may allow an unauthenticated user to potentially enable… Software Manager after 14.0.32 Fix from $1,9502020-06-15 CRITICAL 9.8 CVE-2020-13656 In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/wri… Hobbes after 2020-05-21 Fix from $2,3002020-06-12 HIGH 7.5 CVE-2020-0214 In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote in… Android Patch available Fix from $1,9502020-06-11 MEDIUM 6.5 CVE-2020-0200 In ReadLittleEndian of raw_bit_reader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information… Android Patch available Fix from $1,6002020-06-11 MEDIUM 6.5 CVE-2020-0205 In the DaalaBitReader constructor of entropy_decoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to rem… Android Patch available Fix from $1,6002020-06-11