Oval Definition:oval:org.opensuse.security:def:202036148
Revision Date:2022-06-30Version:1
Title:CVE-2020-36148
Description:

Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2020-36148
SUSE CVE-2020-36148
openSUSE-SU-2021:0444-1
openSUSE-SU-2021:0459-1
Platform(s):openSUSE Leap 15.2
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
SUSE Package Hub for SUSE Linux Enterprise 15 SP2
Product(s):
Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • libmysofa-devel-1.2-1.3 is installed
  • OR libmysofa1-1.2-1.3 is installed
  • OR libmysofa1-32bit-1.2-1.3 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 SP2 is installed
  • AND Package Information
  • libmysofa-devel-0.9.1-bp152.4.3.1 is installed
  • OR libmysofa0-0.9.1-bp152.4.3.1 is installed
  • OR libmysofa0-64bit-0.9.1-bp152.4.3.1 is installed
  • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • libmysofa-devel-0.9.1-lp152.3.3.1 is installed
  • AND libmysofa-devel is signed with openSUSE key
  • OR
  • libmysofa0-0.9.1-lp152.3.3.1 is installed
  • AND libmysofa0 is signed with openSUSE key
  • BACK