PT-2020-13185 · Unisys · Unisys Algol Compiler

Published 2020-05-21 · Updated 2020-06-01 · CVE-2020-12647

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Unisys ALGOL Compiler versions 58.1 through 58.1a.14 Unisys ALGOL Compiler versions 59.1 through 59.1a.8 Unisys ALGOL Compiler versions 60.0 through 60.0a.4

Description The issue is related to the compiler emitting invalid code sequences under rare circumstances, specifically tied to syntax. This could lead to a system fault or negatively impact confidentiality, integrity, and availability.

Recommendations For Unisys ALGOL Compiler versions 58.1 through 58.1a.14, update to version 58.1a.15 or later. For Unisys ALGOL Compiler versions 59.1 through 59.1a.8, update to version 59.1a.9 or later. For Unisys ALGOL Compiler versions 60.0 through 60.0a.4, update to version 60.0a.5 or later.

Fix

Related Identifiers

CVE-2020-12647

Affected Products

Unisys Algol Compiler

References · 3

• https://osv.dev/vulnerability/CVE-2020-12647 · Vendor Advisory
• https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=55 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12647 · Security Note