2020-11-27

2020-11-28

2020-11-29

CVE-2020-29373 Nov 28, 07:15 MEDIUM POC PATCH This Month

An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. Public exploit code available.

Linux Path Traversal Linux Kernel

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2020-29372 Nov 28, 07:15 MEDIUM POC PATCH This Month

An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. Rated medium severity (CVSS 4.7). Public exploit code available.

Information Disclosure Linux Race Condition Canonical Linux Kernel +1

NVD VulDB

CVSS 3.1

4.7

EPSS

0.1%

CVE-2020-27218 Nov 28, 01:15 MEDIUM PATCH This Month

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required.

Apache Code Injection Debian Oracle Debian Linux +18

NVD GitHub

CVSS 3.1

4.8

EPSS

8.1%