CVE-2020-12465
- EPSS 0.17%
- Veröffentlicht 29.04.2020 19:15:12
- Zuletzt bearbeitet 21.11.2024 04:59:45
An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.
CVE-2020-12464
- EPSS 0.07%
- Veröffentlicht 29.04.2020 18:15:13
- Zuletzt bearbeitet 21.11.2024 04:59:45
usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
- EPSS 0.04%
- Veröffentlicht 29.04.2020 13:15:11
- Zuletzt bearbeitet 21.11.2024 04:58:49
In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade...
CVE-2020-1967
- EPSS 66.69%
- Veröffentlicht 21.04.2020 14:15:11
- Zuletzt bearbeitet 21.11.2024 05:11:45
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occur...
CVE-2020-2930
- EPSS 0.08%
- Veröffentlicht 15.04.2020 14:15:36
- Zuletzt bearbeitet 21.11.2024 05:26:39
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple prot...
CVE-2020-2922
- EPSS 0.19%
- Veröffentlicht 15.04.2020 14:15:35
- Zuletzt bearbeitet 21.11.2024 05:26:38
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with ne...
CVE-2020-2923
- EPSS 0.37%
- Veröffentlicht 15.04.2020 14:15:35
- Zuletzt bearbeitet 21.11.2024 05:26:38
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...
CVE-2020-2924
- EPSS 0.37%
- Veröffentlicht 15.04.2020 14:15:35
- Zuletzt bearbeitet 21.11.2024 05:26:38
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...
CVE-2020-2925
- EPSS 0.37%
- Veröffentlicht 15.04.2020 14:15:35
- Zuletzt bearbeitet 21.11.2024 05:26:38
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols ...
CVE-2020-2892
- EPSS 0.24%
- Veröffentlicht 15.04.2020 14:15:34
- Zuletzt bearbeitet 21.11.2024 05:26:33
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...