CVE-2020-14422

python: DoS via inefficiency in IPv{4,6}Interface classes

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10, v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1; v3.9.0, v3.9.0b4, v3.9.0b5, v3.9.0rc1, v3.9.0rc2.

CVSS 3.1 · 5.9 Medium EPSS 12.7% KEV · Not listed

Vendors

Fedoraproject Opensuse Oracle and 2 more

Products

Fedora Leap Enterprise Manager Ops Center and 3 more

CVE-2020-14145

openssh: Observable discrepancy leading to an information leak in the algorithm negotiation

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

CVSS 3.1 · 5.9 Medium EPSS 2.9% KEV · Not listed

Vendors

Netapp Openbsd Redhat

Products

Active Iq Unified Manager Aff A700s Aff A700s Firmware and 8 more

CVE-2020-13871

sqlite: use-after-free in resetAccumulator in select.c

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 3 more

Products

Debian Linux Fedora Cloud Backup and 9 more

CVE-2020-13777

gnutls: session resumption works without master key allowing MITM

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.

CVSS 3.1 · 7.4 High EPSS 22.5% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 2 more

Products

Ubuntu Linux Debian Linux Fedora and 4 more

CVE-2020-13776

systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Netapp Redhat and 1 more

Products

Fedora Active Iq Unified Manager Solidfire \& Hci Management Node and 3 more

CVE-2020-13632

sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Broadcom Canonical Debian and 6 more

Products

Fabric Operating System Ubuntu Linux Debian Linux and 11 more

CVE-2020-13631

sqlite: Virtual table can be renamed into the name of one of its shadow tables

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple Broadcom Canonical and 6 more

Products

Icloud Ipados Iphone Os and 17 more

CVE-2020-13630

sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

CVSS 3.1 · 7.0 High EPSS 1.0% KEV · Not listed

Vendors

Apple Broadcom Canonical and 7 more

Products

Icloud Ipados Iphone Os and 18 more

CVE-2020-13529

systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Netapp Redhat and 1 more

Products

Fedora Active Iq Unified Manager Cloud Backup and 2 more

CVE-2020-13435

sqlite: NULL pointer dereference in sqlite3ExprCodeTarget()

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Redhat Sqlite

Products

Fedora Enterprise Linux Sqlite

CVE-2020-13434

sqlite: integer overflow in sqlite3_str_vappendf function in printf.c

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Apple Canonical Debian and 5 more

Products

Icloud Ipados Iphone Os and 13 more

CVE-2020-12762

libfastjson: integer overflow and out-of-bounds write via a large JSON file

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 3 more

Products

Ubuntu Linux Debian Linux Fedora and 4 more

CVE-2020-12723

perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

CVSS 3.1 · 7.5 High EPSS 6.0% KEV · Not listed

Vendors

Fedoraproject Netapp Opensuse and 3 more

Products

Fedora Oncommand Workflow Automation Snap Creator Framework and 18 more

CVE-2020-12243

openldap: denial of service via nested boolean expressions in LDAP search filters

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

CVSS 3.1 · 7.5 High EPSS 4.7% KEV · Not listed

Vendors

Apple Broadcom Canonical and 6 more

Products

Mac Os X Brocade Fabric Operating System Ubuntu Linux and 25 more

CVE-2020-12062

openssh: scp can send duplicate responses to the server upon a utimes system call failure leading to overwrite of arbitrary files

The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client's download directory by creating a crafted subdirectory anywhere on the remote server. The victim must use the command scp -rp to download a file hierarchy containing, anywhere inside, this crafted subdirectory. NOTE: the vendor points out that "this attack can achieve no more than a hostile peer is already able to achieve within the scp protocol" and "utimes does not fail under normal circumstances.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Openbsd

Products

Openssh

CVE-2020-11656

sqlite: use-after-free in the ALTER TABLE implementation

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

CVSS 3.1 · 9.8 Critical EPSS 8.7% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Ontap Select Deploy Administration Utility Communications Messaging Server Communications Network Charging And Control and 9 more

CVE-2026-65141

Eval Injection Allowing Remote Code Execution in NVIDIA Isaac Lab

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Nvidia

Products

Isaac Lab

CVE-2020-9327

sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed

Vendors

Canonical Netapp Oracle and 3 more

Products

Ubuntu Linux Cloud Backup Communications Messaging Server and 9 more

CVE-2020-8492

python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.

CVSS 3.1 · 6.5 Medium EPSS 6.6% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 3 more

Products

Ubuntu Linux Debian Linux Fedora and 4 more

CVE-2020-8315

python: unsafe dll loading in getpathp.c on Windows

In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Python

Products

Python