PT-2020-4942 · Trustwave+2 · Opendmarc+2

Pjlantz · Published 2020-07-27 · Updated 2023-09-11 · CVE-2020-12460

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: OpenDMARC versions 1.3.2 and 1.4.x through 1.4.0-Beta1

Description: The issue is related to improper null termination in the opendmarc xml parse function, which can result in a one-byte heap overflow in opendmarc xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '0' byte overwrites the heap metadata of the next chunk and its PREV INUSE flag. The vulnerability may allow a remote attacker to execute arbitrary code in the target system by opening a specially crafted DMARC aggregate report.

Recommendations: For OpenDMARC versions 1.3.2 and 1.4.x through 1.4.0-Beta1, consider disabling the opendmarc xml parse function until a patch is available to prevent remote memory corruption. Restrict access to the opendmarc xml module to minimize the risk of exploitation. Avoid using the opendmarc xml module to parse DMARC aggregate reports until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2020-05517

CVE-2020-12460

DLA-2639-1

MGASA-2021-0462

USN-6356-1

Affected Products

Linuxmint

Opendmarc

Ubuntu

References · 28

• 🔥 https://github.com/trusteddomainproject/OpenDMARC/issues/64 · Exploit
• https://osv.dev/vulnerability/MGASA-2021-0462 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0462.html · Security Note
• https://bdu.fstec.ru/vul/2020-05517 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12460 · Security Note
• https://ubuntu.com/security/CVE-2020-12460 · Vendor Advisory
• https://security.gentoo.org/glsa/202011-02 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-12460 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6356-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-12460 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12460 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2639-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-12460 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2D4JGHMALEJEWWG56DKR5OZB22TK7W5B · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12272 · Vendor Advisory