CVE-2020-29394

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2020-29394

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-29394.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-29394

Related

Published

2020-11-30T19:15:12Z

Modified

2024-09-18T01:00:22Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A buffer overflow in the dltfilterload function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).

References

Affected packages

Debian:11 / dlt-daemon

Package

Name: dlt-daemon
Purl: pkg:deb/debian/dlt-daemon?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.18.5-0.3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / dlt-daemon

Package

Name: dlt-daemon
Purl: pkg:deb/debian/dlt-daemon?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.18.5-0.3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / dlt-daemon

Package

Name: dlt-daemon
Purl: pkg:deb/debian/dlt-daemon?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.18.5-0.3

Ecosystem specific

{
    "urgency": "not yet assigned"
}