CVE-2020-3898: Input Validation
First published: Tue Mar 24 2020(Updated: )
A heap-based buffer overflow was discovered in in libcups's ppdFindOption() function in ppd-mark.c:430. The issue can be reproduced by loading a crafted ppd file and calling the ppdMarkDefaults() libcups API function.
Credit: Stephan Zeisberg (github.com/stze) Security Research Labs product-security@apple.com product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Mac OS X | <10.15.4 | |
| Apple macOS Catalina | <10.15.4 | 10.15.4 |
| Apple Mojave | ||
| Apple High Sierra | ||
| debian/cups | 2.2.10-6+deb10u6 2.2.10-6+deb10u9 2.3.3op2-3+deb11u6 2.3.3op2-3+deb11u2 2.4.2-3+deb12u5 2.4.7-1 | |
| ubuntu/cups | <2.2.7-1ubuntu2.8 | 2.2.7-1ubuntu2.8 |
| ubuntu/cups | <2.2.12-2ubuntu1.1 | 2.2.12-2ubuntu1.1 |
| ubuntu/cups | <2.3.1-9ubuntu1.1 | 2.3.1-9ubuntu1.1 |
| ubuntu/cups | <2.1.3-4ubuntu0.11 | 2.1.3-4ubuntu0.11 |
| IBM QRadar SIEM | <=7.5 - 7.5.0 UP8 IF01 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/kb/HT211100
- https://launchpad.net/bugs/cve/CVE-2020-3898
- https://support.apple.com/en-us/HT211100 (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1826330
- https://access.redhat.com/errata/RHSA-2020:4469
- https://access.redhat.com/security/cve/cve-2020-3898
- https://bugzilla.redhat.com/show_bug.cgi?id=1823964
- https://src.fedoraproject.org/rpms/cups/blob/c1920d09b842bd2d0611559d00d595abd8aa2424/f/cups-ppdopen-heap-overflow.patch
- https://github.com/apple/cups/commit/82e3ee0e3230287b76a76fb8f16b92ca6e50b444
- https://security-tracker.debian.org/tracker/CVE-2020-3898
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3898
- https://ubuntu.com/security/notices/USN-4340-1
- https://nvd.nist.gov/vuln/detail/CVE-2020-3898
- https://src.fedoraproject.org/rpms/cups/blob/master/f/cups-ppdopen-heap-overflow.patch
- https://ubuntu.com/security/CVE-2020-3898
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181867
- https://www.ibm.com/support/pages/node/7150684 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2020-9772
- CVE-2020-3903
- CVE-2020-3904
- CVE-2020-3883
- CVE-2020-6616
- CVE-2020-9853
- CVE-2020-3907
- CVE-2020-3908
- CVE-2020-3912
- CVE-2020-9779
- CVE-2020-3892
- CVE-2020-3893
- CVE-2020-3905
- CVE-2019-8853
- CVE-2020-9776
- CVE-2020-9828
- CVE-2020-3913
- CVE-2020-9829
- CVE-2020-3898
- CVE-2020-3881
- CVE-2020-3886
- CVE-2019-14615
- CVE-2020-3919
- CVE-2020-3851
- CVE-2020-3896
- CVE-2020-3914
- CVE-2020-9785
- CVE-2020-3909
- CVE-2020-3911
- CVE-2020-3910
- CVE-2020-3884
- CVE-2020-3915
- CVE-2020-9775
- CVE-2020-9771
- CVE-2020-3918
- CVE-2019-19232
- CVE-2020-9786
- CVE-2020-3906
- CVE-2020-3889
- CVE-2020-9769
- CVE-2020-9787
- CVE-2020-3902
Frequently Asked Questions
What is CVE-2020-3898?
CVE-2020-3898 is a vulnerability in CUPS that allows for memory corruption due to improper validation.
Who does CVE-2020-3898 affect?
CVE-2020-3898 affects users of Apple macOS Catalina (10.15.4), Mojave, and High Sierra.
What is the severity level of CVE-2020-3898?
The severity level of CVE-2020-3898 has not been provided in the information provided.
How can I fix CVE-2020-3898?
To fix CVE-2020-3898, update your macOS to the latest version provided by Apple.
Where can I find more information about CVE-2020-3898?
You can find more information about CVE-2020-3898 on the Apple support website.
- collector/nvd-index
- agent/type
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-3898
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- collector/usn-cve
- source/Ubuntu
- collector/nvd-cve
- source/NVD
- agent/remedy
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/tags
- collector/ibm-support
- source/IBM
- vendor/apple
- canonical/apple mac os x
- canonical/apple macos catalina
- canonical/apple mojave
- canonical/apple high sierra
- package-manager/debian
- package-manager/ubuntu
- vendor/ibm
- canonical/ibm qradar siem
- version/ibm qradar siem/7.5 - 7.5.0 up8 if01