Enterprise Linux

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-05	CVE-2020-27842	There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. local low complexity uclouvain fedoraproject debian redhat oracle	5.5
2021-01-04	CVE-2020-35507	There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. local low complexity gnu redhat netapp broadcom	5.5
2020-12-21	CVE-2020-27846	A signature verification vulnerability exists in crewjam/saml. network low complexity grafana saml-project redhat fedoraproject critical	9.8
2020-12-15	CVE-2020-27777	A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. local low complexity linux redhat	6.7
2020-12-15	CVE-2020-25712	A flaw was found in xorg-x11-server before 1.20.10. local low complexity x-org redhat	7.8
2020-12-11	CVE-2020-27825	A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). local high complexity linux redhat debian netapp	5.7
2020-12-11	CVE-2020-27786	A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. local low complexity linux redhat netapp	7.8
2020-12-08	CVE-2020-25692	A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. network low complexity openldap redhat netapp	7.5
2020-12-06	CVE-2020-29573	Out-of-bounds Write vulnerability in multiple products sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to sprintf. network low complexity gnu redhat netapp CWE-787	7.5
2020-12-04	CVE-2020-27773	Divide By Zero vulnerability in multiple products A flaw was found in ImageMagick in MagickCore/gem-private.h. local low complexity imagemagick redhat debian CWE-369	3.3