CVE-2020-36148: Null Pointer Dereference
First published: Mon Feb 08 2021(Updated: )
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symonics libmysofa | >=0.5<=1.1 | |
| Fedoraproject Fedora | =32 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/hoene/libmysofa/issues/138
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
Frequently Asked Questions
What is CVE-2020-36148?
CVE-2020-36148 is a vulnerability that occurs due to incorrect handling of input data in the libmysofa library 0.5 - 1.1.
What is the severity of CVE-2020-36148?
The severity of CVE-2020-36148 is medium with a CVSS score of 6.5.
How does CVE-2020-36148 affect Symonics libmysofa?
Symonics libmysofa versions 0.5 to 1.1 are affected by CVE-2020-36148.
How does CVE-2020-36148 affect Fedora?
Fedora version 32 is affected by CVE-2020-36148.
How can I fix the CVE-2020-36148 vulnerability?
To fix the CVE-2020-36148 vulnerability, it is recommended to update the libmysofa library to a version above 1.1.
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/tags
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/symonics
- canonical/symonics libmysofa
- version/symonics libmysofa/0.5
- version/symonics libmysofa/1.1
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/32