CVE-2020-36149: Null Pointer Dereference
First published: Mon Feb 08 2021(Updated: )
Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symonics libmysofa | >=0.5<=1.1 | |
| Fedoraproject Fedora | =32 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/hoene/libmysofa/issues/137
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
Frequently Asked Questions
What is CVE-2020-36149?
CVE-2020-36149 is a vulnerability in the changeAttribute function in the libmysofa library 0.5 - 1.1 that can lead to NULL pointer dereference and segmentation fault error.
What is the severity of CVE-2020-36149?
The severity of CVE-2020-36149 is medium with a CVSS score of 6.5.
Which software is affected by CVE-2020-36149?
The libmysofa library versions 0.5 to 1.1 and Fedora 32 are affected by CVE-2020-36149.
How can I fix CVE-2020-36149?
Update to a fixed version of the libmysofa library or apply the necessary patches provided by the vendor.
Where can I find more information about CVE-2020-36149?
More information about CVE-2020-36149 can be found at the following references: - [GitHub Issue](https://github.com/hoene/libmysofa/issues/137) - [Fedora Project Announcement](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/)
- collector/nvd-index
- agent/weakness
- agent/event
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/symonics
- canonical/symonics libmysofa
- version/symonics libmysofa/0.5
- version/symonics libmysofa/1.1
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/32