PT-2020-5330 · Apple+7 · Apple Macos+8

Stephan Zeisberg · Published 2020-04-20 · Updated 2024-06-15 · CVE-2020-3898

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 CUPS (affected versions not specified)

Description A memory corruption issue was addressed with improved validation, which may allow an application to gain elevated privileges. The issue is related to a buffer overflow in memory, potentially allowing an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For macOS versions prior to 10.15.4, update to macOS Catalina 10.15.4 to resolve the issue. For CUPS, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Memory Corruption

RCE

Weakness Enumeration

CWE-119

CWE-787

CWE-20

Related Identifiers

ALT-PU-2021-1173

ALT-PU-2021-1245

ALT-PU-2022-2414

BDU:2021-00124

CESA-2020_4469

CVE-2020-3898

DLA-2237-1

MGASA-2020-0248

OPENSUSE-SU-2020:0555-1

OPENSUSE-SU-2020_0555-1

OPENSUSE-SU-2024:10707-1

RHSA-2020:4469

RHSA-2020_4469

RLSA-2020:4469

SUSE-SU-2020:1045-1

SUSE-SU-2020:1083-1

SUSE-SU-2020:14341-1

SUSE-SU-2020_1045-1

SUSE-SU-2020_1083-1

SUSE-SU-2020_14341-1

USN-4340-1

Affected Products

Alt Linux

Cups

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Apple Macos

References · 71

• https://osv.dev/vulnerability/MGASA-2020-0248 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:14341-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se15-bulletin-20201201SE15 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0248.html · Security Note
• https://osv.dev/vulnerability/CVE-2020-3898 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2020:4469 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-4469.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3898 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-3898 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4340-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-3898 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-8842 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81 · Vendor Advisory
• https://support.apple.com/kb/HT211100 · Vendor Advisory