PT-2020-17157 · Genivia · Dlt-Daemon

Khanh Luong Hong Duy · Published 2020-11-30 · Updated 2023-02-03 · CVE-2020-29394

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dlt-daemon versions 2.8.5 through 2.18.5

Description A buffer overflow in the dlt filter load function in dlt common.c allows arbitrary code execution because fscanf is misused, with no limit on the number of characters to be read in the format argument.

Recommendations For versions 2.8.5 through 2.18.5, consider disabling the dlt filter load function until a patch is available to prevent potential arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-29394

DLA-3231-1

Affected Products

Dlt-Daemon

References · 17

• 🔥 https://github.com/GENIVI/dlt-daemon/issues/274 · Exploit
• https://github.com/GENIVI/dlt-daemon/pull/275 · Patch
• https://github.com/GENIVI/dlt-daemon/pull/288 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-29394 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-29394 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-29394 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-29394 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29394 · Security Note
• https://osv.dev/vulnerability/CVE-2020-29394 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3231-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-29394 · Vendor Advisory
• https://github.com/GENIVI/dlt-daemon/commit/ff4f44c159df6f44b48bd38c9d2f104eb360be11 · Note
• https://lists.debian.org/debian-lts-announce/2022/12/msg00016.html · Note
• https://t.me/cvenotify/11516 · Telegram Post
• https://t.me/cvenotify/43575 · Telegram Post