CVE-2020-15690

Опубликовано: 30 янв. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.

Ссылки

http://www.openwall.com/lists/oss-security/2021/02/04/3
Exploit
Mailing List
Third Party Advisory
https://consensys.net/diligence/vulnerabilities/nim-asyncftpd-crlf-injection/
Exploit
Third Party Advisory
https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/asyncftpclient.nim#L145
Exploit
Third Party Advisory
https://github.com/nim-lang/Nim/compare/v1.2.4...v1.2.6
Patch
Third Party Advisory
https://github.com/tintinweb/pub/tree/master/pocs/cve-2020-15690
Exploit
Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/02/04/3
Exploit
Mailing List
Third Party Advisory
https://consensys.net/diligence/vulnerabilities/nim-asyncftpd-crlf-injection/
Exploit
Third Party Advisory
https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/asyncftpclient.nim#L145
Exploit
Third Party Advisory
https://github.com/nim-lang/Nim/compare/v1.2.4...v1.2.6
Patch
Third Party Advisory
https://github.com/tintinweb/pub/tree/master/pocs/cve-2020-15690
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*

Версия до 1.2.6 (исключая)

EPSS

Процентиль: 88%

0.03219

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-74

Связанные уязвимости

CVE-2020-15690

CVSS3: 9.8

ubuntu

почти 6 лет назад

In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.

CVE-2020-15690

CVSS3: 9.8

debian

почти 6 лет назад

In Nim before 1.2.6, the standard library asyncftpclient lacks a check ...

ALT-PU-2020-3173

CVSS3: 9.8

altlinux

около 6 лет назад

ALT-PU-2020-3173: package `nim-lang` update to version 1.4.0-alt1

openSUSE-SU-2022:10101-1

suse-cvrf

около 4 лет назад

Security update for nim

openSUSE-SU-2022:10095-1

suse-cvrf

около 4 лет назад

Security update for nim

EPSS

Процентиль: 88%

0.03219

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-74