cve-2020-3910
Vulnerability from cvelistv5
Published
2020-04-01 17:54
Modified
2024-08-04 07:52
Severity ?
EPSS score ?
Summary
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Apple | iOS |
Version: unspecified < iOS 13.4 and iPadOS 13.4 |
|||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-04T07:52:20.343Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://support.apple.com/HT211100", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://support.apple.com/HT211102", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://support.apple.com/HT211101", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://support.apple.com/HT211103", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://support.apple.com/HT211105", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://support.apple.com/HT211106", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://support.apple.com/HT211107", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "iOS", vendor: "Apple", versions: [ { lessThan: "iOS 13.4 and iPadOS 13.4", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "macOS", vendor: "Apple", versions: [ { lessThan: "macOS Catalina 10.15.4", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "tvOS", vendor: "Apple", versions: [ { lessThan: "tvOS 13.4", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "watchOS", vendor: "Apple", versions: [ { lessThan: "watchOS 6.2", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "iTunes for Windows", vendor: "Apple", versions: [ { lessThan: "iTunes for Windows 12.10.5", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "iCloud for Windows", vendor: "Apple", versions: [ { lessThan: "iCloud for Windows 10.9.3", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "iCloud for Windows (Legacy)", vendor: "Apple", versions: [ { lessThan: "iCloud for Windows 7.18", status: "affected", version: "unspecified", versionType: "custom", }, ], }, ], descriptions: [ { lang: "en", value: "A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.", }, ], problemTypes: [ { descriptions: [ { description: "Multiple issues in libxml2", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2020-10-16T16:06:54", orgId: "286789f9-fbc2-4510-9f9a-43facdede74c", shortName: "apple", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://support.apple.com/HT211100", }, { tags: [ "x_refsource_MISC", ], url: "https://support.apple.com/HT211102", }, { tags: [ "x_refsource_MISC", ], url: "https://support.apple.com/HT211101", }, { tags: [ "x_refsource_MISC", ], url: "https://support.apple.com/HT211103", }, { tags: [ "x_refsource_MISC", ], url: "https://support.apple.com/HT211105", }, { tags: [ "x_refsource_MISC", ], url: "https://support.apple.com/HT211106", }, { tags: [ "x_refsource_MISC", ], url: "https://support.apple.com/HT211107", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "product-security@apple.com", ID: "CVE-2020-3910", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "iOS", version: { version_data: [ { version_affected: "<", version_value: "iOS 13.4 and iPadOS 13.4", }, ], }, }, { product_name: "macOS", version: { version_data: [ { version_affected: "<", version_value: "macOS Catalina 10.15.4", }, ], }, }, { product_name: "tvOS", version: { version_data: [ { version_affected: "<", version_value: "tvOS 13.4", }, ], }, }, { product_name: "watchOS", version: { version_data: [ { version_affected: "<", version_value: "watchOS 6.2", }, ], }, }, { product_name: "iTunes for Windows", version: { version_data: [ { version_affected: "<", version_value: "iTunes for Windows 12.10.5", }, ], }, }, { product_name: "iCloud for Windows", version: { version_data: [ { version_affected: "<", version_value: "iCloud for Windows 10.9.3", }, ], }, }, { product_name: "iCloud for Windows (Legacy)", version: { version_data: [ { version_affected: "<", version_value: "iCloud for Windows 7.18", }, ], }, }, ], }, vendor_name: "Apple", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Multiple issues in libxml2", }, ], }, ], }, references: { reference_data: [ { name: "https://support.apple.com/HT211100", refsource: "MISC", url: "https://support.apple.com/HT211100", }, { name: "https://support.apple.com/HT211102", refsource: "MISC", url: "https://support.apple.com/HT211102", }, { name: "https://support.apple.com/HT211101", refsource: "MISC", url: "https://support.apple.com/HT211101", }, { name: "https://support.apple.com/HT211103", refsource: "MISC", url: "https://support.apple.com/HT211103", }, { name: "https://support.apple.com/HT211105", refsource: "MISC", url: "https://support.apple.com/HT211105", }, { name: "https://support.apple.com/HT211106", refsource: "MISC", url: "https://support.apple.com/HT211106", }, { name: "https://support.apple.com/HT211107", refsource: "MISC", url: "https://support.apple.com/HT211107", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "286789f9-fbc2-4510-9f9a-43facdede74c", assignerShortName: "apple", cveId: "CVE-2020-3910", datePublished: "2020-04-01T17:54:25", dateReserved: "2019-12-18T00:00:00", dateUpdated: "2024-08-04T07:52:20.343Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2020-3910\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2020-04-01T18:15:17.117\",\"lastModified\":\"2024-11-21T05:31:56.553\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.\"},{\"lang\":\"es\",\"value\":\"Se abordó un desbordamiento del búfer con una comprobación de tamaño mejorada. Este problema es corregido en iOS versión 13.4 y iPadOS versión 13.4, macOS Catalina versión 10.15.4, tvOS versión 13.4, watchOS versión 6.2, iTunes para Windows versión 12.10.5, iCloud para Windows versión 10.9.3, iCloud para Windows versión 7.18. Múltiples problemas en libxml2.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*\",\"versionEndExcluding\":\"10.9.3\",\"matchCriteriaId\":\"5699D48B-9BBA-4BED-AFB7-1EB453797EBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*\",\"versionEndExcluding\":\"12.10.5\",\"matchCriteriaId\":\"82E6396E-8C78-4EED-88EC-B97C9B4C2DA9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"13.4\",\"matchCriteriaId\":\"1899DC84-D14F-4D7C-B5BD-1B64404BF4AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"13.4\",\"matchCriteriaId\":\"09DD8CD4-AF42-4A2B-8DF0-AED34E43FDD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.15.4\",\"matchCriteriaId\":\"D70894A1-024A-44E6-B630-B3137B7ED1BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"13.4\",\"matchCriteriaId\":\"3D72D358-8126-4B3C-97E9-A01731C38D45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.2\",\"matchCriteriaId\":\"29B94B7E-D55C-417C-B2C9-88EB62F11857\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/HT211100\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211101\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211102\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211103\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211105\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211106\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211107\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211100\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211101\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211102\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211103\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211105\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211106\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/HT211107\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}", }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.