CVE-2020-27781

ceph: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila

User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved via the interface drivers. Then, all users of the requesting OpenStack project can view the access key. This enables the attacker to target any resource that the user has access to. This can be done to even "admin" users, compromising the ceph administrator. This flaw affects Ceph versions prior to 14.2.16, 15.x prior to 15.2.8, and 16.x prior to 16.2.0.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Redhat

Products

Fedora Ceph Ceph Storage and 3 more

CVE-2020-27780

pam: authentication bypass when the user doesn't exist and root password is blank

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed

Vendors

Linux-pam

Products

Linux-pam

CVE-2020-27779

grub2: cutmem command allows privileged user to remove memory regions when Secure Boot is enabled

A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Gnu Netapp and 1 more

Products

Fedora Grub2 Ontap Select Deploy Administration Utility and 9 more

CVE-2020-27778

poppler: pdftohtml: access to uninitialized pointer could lead to DoS

A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Debian Freedesktop Redhat

Products

Debian Linux Poppler Enterprise Linux

CVE-2020-27777

kernel: powerpc: RTAS calls can be used to compromise kernel integrity

A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Openshift Container Platform

CVE-2020-27776

ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Imagemagick Redhat

Products

Imagemagick Enterprise Linux

CVE-2020-27775

ImageMagick: outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Debian Imagemagick Redhat

Products

Debian Linux Imagemagick Enterprise Linux

CVE-2020-27774

ImageMagick: integer overflow at MagickCore/statistic.c

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type `ssize_t`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Debian Imagemagick Redhat

Products

Debian Linux Imagemagick Enterprise Linux

CVE-2020-27773

ImageMagick: division by zero at MagickCore/gem-private.h

A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Debian Imagemagick Redhat

Products

Debian Linux Imagemagick Enterprise Linux

CVE-2020-27772

ImageMagick: outside the range of representable values of type 'unsigned int' at coders/bmp.c

A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned int`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Debian Imagemagick Redhat

Products

Debian Linux Imagemagick Enterprise Linux

CVE-2020-27771

ImageMagick: outside the range of representable values of type 'unsigned char' at coders/pdf.c

In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex() to ssize_t type to avoid this bug. This undefined behavior could be triggered when ImageMagick processes a crafted pdf file. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was demonstrated in this case. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS 1.2% KEV · Not listed

Vendors

Debian Imagemagick Redhat

Products

Debian Linux Imagemagick Enterprise Linux

CVE-2020-27770

ImageMagick: unsigned offset overflowed at MagickCore/string.c

Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Debian Imagemagick

Products

Debian Linux Imagemagick

CVE-2020-27769

ImageMagick: outside the range of representable values of type 'float' at MagickCore/quantize.c

In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.

CVSS 3.1 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Fedoraproject Imagemagick Redhat

Products

Fedora Imagemagick Enterprise Linux Desktop

CVE-2020-27768

ImageMagick: outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h

In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS 1.4% KEV · Not listed

Vendors

Debian Imagemagick

Products

Debian Linux Imagemagick

CVE-2020-27767

ImageMagick: outside the range of representable values of type 'float' at MagickCore/quantum.h

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types `float` and `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS 1.1% KEV · Not listed

Vendors

Debian Imagemagick Redhat

Products

Debian Linux Imagemagick Enterprise Linux

CVE-2020-27766

ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-69.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed

Vendors

Debian Imagemagick

Products

Debian Linux Imagemagick

CVE-2020-27765

ImageMagick: division by zero at MagickCore/segment.c

A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS 1.0% KEV · Not listed

Vendors

Debian Imagemagick Redhat

Products

Debian Linux Imagemagick Enterprise Linux

CVE-2020-27764

ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c

In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69.

CVSS 3.1 · 3.3 Low EPSS 1.2% KEV · Not listed

Vendors

Debian Imagemagick

Products

Debian Linux Imagemagick

CVE-2020-27763

ImageMagick: division by zero at MagickCore/resize.c

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Debian Imagemagick

Products

Debian Linux Imagemagick

CVE-2020-27762

ImageMagick: outside the range of representable values of type 'unsigned char' at coders/hdr.c

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Debian Imagemagick

Products

Debian Linux Imagemagick