|
209931
|
5.5 |
MEDIUM
Local
|
f5
|
njs
|
njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-24347
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209932
|
7.8 |
HIGH
Local
|
f5
|
njs
|
njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c.
|
CWE-416
Use After Free
|
CVE-2020-24346
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209933
|
7.8 |
HIGH
Local
|
jerryscript
|
jerryscript
|
JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
|
CWE-787
Out-of-bounds Write
|
CVE-2020-24345
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209934
|
7.1 |
HIGH
Local
|
jerryscript
|
jerryscript
|
JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-24344
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209935
|
7.8 |
HIGH
Local
|
artifex
|
mujs
|
Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c.
|
CWE-416
Use After Free
|
CVE-2020-24343
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209936
|
7.8 |
HIGH
Local
|
lua fedoraproject
|
lua fedora
|
Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2020-24342
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209937
|
5.5 |
MEDIUM
Local
|
trustedcomputinggroup fedoraproject
|
trousers fedora
|
An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks. The tss user can be used to c…
|
CWE-59
Link Following
|
CVE-2020-24332
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209938
|
7.8 |
HIGH
Local
|
trousers_project fedoraproject
|
trousers fedora
|
An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various…
|
CWE-269
Improper Privilege Management
|
CVE-2020-24331
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209939
|
7.8 |
HIGH
Local
|
trousers_project fedoraproject
|
trousers fedora
|
An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.
|
CWE-269
Improper Privilege Management
|
CVE-2020-24330
|
2024-11-21 14:14 |
2020-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209940
|
7.8 |
HIGH
Local
|
flac_project
|
flac
|
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-22219
|
2024-11-21 14:13 |
2023-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|