CVE-2020-36149: Null Pointer Dereference
Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-36149?
CVE-2020-36149 is a vulnerability in the changeAttribute function in the libmysofa library 0.5 - 1.1 that can lead to NULL pointer dereference and segmentation fault error.
What is the severity of CVE-2020-36149?
The severity of CVE-2020-36149 is medium with a CVSS score of 6.5.
Which software is affected by CVE-2020-36149?
The libmysofa library versions 0.5 to 1.1 and Fedora 32 are affected by CVE-2020-36149.
How can I fix CVE-2020-36149?
Update to a fixed version of the libmysofa library or apply the necessary patches provided by the vendor.
Where can I find more information about CVE-2020-36149?
More information about CVE-2020-36149 can be found at the following references: - [GitHub Issue](https://github.com/hoene/libmysofa/issues/137) - [Fedora Project Announcement](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/)