VDB

GCVE-110-MAGEIA-2020-418

GCVE-110-MAGEIA-2020-418
Advisory Published
Vulnetix · Advisory published November 13, 2020
High memory usage during deserialization of Proxy class with many interfaces. (CVE-2020-14779) Credentials sent over unencrypted LDAP connection. (CVE-2020-14781) Certificate blacklist bypass via alternate certificate encodings. (CVE-2020-14782) Integer overflow leading to out-of-bounds access. (CVE-2020-14792) Missing permission check in path to URI conversion. (CVE-2020-14796) Incomplete check for invalid characters in URI to path conversion. (CVE-2020-14797) Race condition in NIO Buffer boundary checks. (CVE-2020-14803) Also, the timezone package has been updated to version 2020d.

Affected Products

VendorProductVersionsPlatforms
Mageiajava-1.8.0-openjdk0 (affected), 1.8.0.272-1.b10.1.mga7 (unaffected)
Mageiatimezone2020d-1.mga7 (unaffected), 0 (affected)

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›