CVE-2020-4097

Опубликовано: 05 нояб. 2020

Источник: nvd

CVSS3: 6.8

CVSS2: 4.6

EPSS Низкий

Описание

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client.

Ссылки

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796
Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*

Версия от 9.0 (включая) до 9.0.1 (включая)

cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*

Версия от 11.0 (включая) до 11.0.1 (включая)

cpe:2.3:a:hcltech:notes:9.0.1:fp10:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp10if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp10if2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp10if3:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp10if4:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp10if5:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp10if6:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp10if7:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp1if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp1if2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp2if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp2if2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp2if3:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp2if4:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp3if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp3if2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp3if3:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp3if4:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp4if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp4if2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp5if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp5if2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp5if3:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp7if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp7if2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp8if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp9if1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:9.0.1:fp9if2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.0:fp1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.0:fp2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.0:fp3:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.0:fp4:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.0:fp5:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.1:fp4:*:*:*:*:*:*

cpe:2.3:a:hcltech:notes:10.0.1:fp5:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00077

Низкий

6.8 Medium

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

GHSA-f8fj-f7w2-x4xm

github

больше 3 лет назад