CVE-2020-36244

Опубликовано: 10 фев. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon (versions prior to 2.18.6).

Ссылки

https://github.com/GENIVI/dlt-daemon/compare/v2.18.5...v2.18.6
Patch
Third Party Advisory
https://github.com/GENIVI/dlt-daemon/issues/265
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00016.html
Patch
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-147-01
Third Party Advisory
US Government Resource
https://github.com/GENIVI/dlt-daemon/compare/v2.18.5...v2.18.6
Patch
Third Party Advisory
https://github.com/GENIVI/dlt-daemon/issues/265
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00016.html
Patch
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-147-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:genivi:diagnostic_log_and_trace:*:*:*:*:*:*:*:*

Версия до 2.18.6 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01936

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2020-36244

CVSS3: 9.8

ubuntu

почти 5 лет назад

CVE-2020-36244

CVSS3: 9.8

debian

почти 5 лет назад

The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to ...

GHSA-rqph-xm6j-r2mf

CVSS3: 9.8

github

больше 3 лет назад

The daemon in GENIVI Diagnostic Log and Trace (DLT) before 2.18.6 has a heap-based buffer overflow in dlt_buffer_write_block in shared/dlt_common.c.

EPSS

Процентиль: 83%

0.01936

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787