CVE-2020-15025
- EPSS 1.89%
- Veröffentlicht 24.06.2020 19:15:10
- Zuletzt bearbeitet 21.11.2024 05:04:38
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC alg...
CVE-2020-8619
- EPSS 5.23%
- Veröffentlicht 17.06.2020 22:15:13
- Zuletzt bearbeitet 21.11.2024 05:39:08
In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone ...
CVE-2020-8618
- EPSS 1.3%
- Veröffentlicht 17.06.2020 22:15:12
- Zuletzt bearbeitet 21.11.2024 05:39:08
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
CVE-2020-14195
- EPSS 9.51%
- Veröffentlicht 16.06.2020 16:15:11
- Zuletzt bearbeitet 21.11.2024 05:02:50
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).
CVE-2020-14155
- EPSS 0.15%
- Veröffentlicht 15.06.2020 17:15:10
- Zuletzt bearbeitet 21.11.2024 05:02:45
libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.
CVE-2020-14060
- EPSS 8.72%
- Veröffentlicht 14.06.2020 21:15:09
- Zuletzt bearbeitet 21.11.2024 05:02:27
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).
CVE-2020-14061
- EPSS 6.15%
- Veröffentlicht 14.06.2020 20:15:10
- Zuletzt bearbeitet 27.08.2025 21:15:35
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, o...
CVE-2020-14062
- EPSS 7.71%
- Veröffentlicht 14.06.2020 20:15:10
- Zuletzt bearbeitet 21.11.2024 05:02:28
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).
CVE-2020-10732
- EPSS 0.05%
- Veröffentlicht 12.06.2020 14:15:11
- Zuletzt bearbeitet 21.11.2024 04:55:57
A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
CVE-2020-10757
- EPSS 0.41%
- Veröffentlicht 09.06.2020 13:15:10
- Zuletzt bearbeitet 21.11.2024 04:56:00
A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.