ID

VAR-202002-1172


CVE

CVE-2020-3846


TITLE

plural Apple Product Buffer Overflow Vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2020-002352

DESCRIPTION

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution. are all products of Apple (Apple). Apple iTunes for Windows is a media player application based on the Windows platform. Apple watchOS is a smart watch operating system. Apple macOS Catalina is a dedicated operating system developed for Mac computers. libxml2 is one of the function library components based on C language for parsing XML documents. A security vulnerability exists in the libxml2 component of several Apple products. The following products and versions are affected: Windows-based versions of iCloud prior to 10.9.2, versions prior to 7.17; Windows-based versions of iTunes prior to 12.10.4; versions prior to tvOS 13.3.1; versions prior to watchOS 6.1.2; macOS Catalina 10.15 Versions prior to .3. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-1-28-2 macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra macOS Catalina 10.15.3, Security Update 2020-001 Mojave, and Security Update 2020-001 High Sierra are now available and address the following: AnnotationKit Available for: macOS Catalina 10.15.2 Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-3877: an anonymous researcher working with Trend Micro's Zero Day Initiative apache_mod_php Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Multiple issues in PHP Description: Multiple issues were addressed by updating to PHP version 7.3.11. CVE-2019-11043 Audio Available for: macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3857: Zhuo Liang of Qihoo 360 Vulcan Team autofs Available for: macOS Catalina 10.15.2 Impact: Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper Description: This was addressed with additional checks by Gatekeeper on files mounted through a network share. CVE-2020-3866: Jose Castro Almeida (@HackerOn2Wheels) and René Kroka (@rene_kroka) CoreBluetooth Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6 Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: A memory corruption issue was addressed with improved input validation. CVE-2020-3848: Jianjun Dai of Qihoo 360 Alpha Lab CVE-2020-3849: Jianjun Dai of Qihoo 360 Alpha Lab CVE-2020-3850: Jianjun Dai of Qihoo 360 Alpha Lab CoreBluetooth Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6 Impact: A remote attacker may be able to leak memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-3847: Jianjun Dai of Qihoo 360 Alpha Lab Crash Reporter Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A malicious application may be able to access restricted files Description: A validation issue existed in the handling of symlinks. CVE-2020-3835: Csaba Fitzl (@theevilbit) Image Processing Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved input validation. CVE-2020-3827: Samuel Groß of Google Project Zero ImageIO Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-3826: Samuel Groß of Google Project Zero CVE-2020-3870 CVE-2020-3878: Samuel Groß of Google Project Zero Intel Graphics Driver Available for: macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3845: Zhuo Liang of Qihoo 360 Vulcan Team IOAcceleratorFamily Available for: macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3837: Brandon Azad of Google Project Zero IPSec Available for: macOS Catalina 10.15.2 Impact: Loading a maliciously crafted racoon configuration file may lead to arbitrary code execution Description: An off by one issue existed in the handling of racoon configuration files. CVE-2020-3840: @littlelailo Kernel Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2020-3875: Brandon Azad of Google Project Zero Kernel Available for: macOS Catalina 10.15.2 Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2020-3872: Haakon Garseg Mørk of Cognite and Cim Stordal of Cognite Kernel Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A malicious application may be able to execute arbitrary code with system privileges Description: A type confusion issue was addressed with improved memory handling. CVE-2020-3853: Brandon Azad of Google Project Zero Kernel Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A malicious application may be able to determine kernel memory layout Description: An access issue was addressed with improved memory management. CVE-2020-3836: Brandon Azad of Google Project Zero Kernel Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3846: Ranier Vilela libxpc Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Processing a maliciously crafted string may lead to heap corruption Description: A memory corruption issue was addressed with improved input validation. CVE-2020-3856: Ian Beer of Google Project Zero libxpc Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: An application may be able to gain elevated privileges Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2020-3829: Ian Beer of Google Project Zero PackageKit Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A malicious application may be able to overwrite arbitrary files Description: A validation issue existed in the handling of symlinks. CVE-2020-3830: Csaba Fitzl (@theevilbit) Security Available for: macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3854: Jakob Rieck (@0xdead10cc) and Maximilian Blochberger of the Security in Distributed Systems Group of University of Hamburg sudo Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Certain configurations may allow a local attacker to execute arbitrary code Description: A buffer overflow issue was addressed with improved memory handling. CVE-2019-18634: Apple System Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6 Impact: A malicious application may be able to overwrite arbitrary files Description: An access issue was addressed with improved access restrictions. CVE-2020-3855: Csaba Fitzl (@theevilbit) Wi-Fi Available for: macOS Catalina 10.15.2 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2020-3839: s0ngsari of Theori and Lee of Seoul National University working with Trend Micro's Zero Day Initiative Wi-Fi Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A memory corruption issue was addressed with improved input validation. CVE-2020-3843: Ian Beer of Google Project Zero wifivelocityd Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with system privileges Description: The issue was addressed with improved permissions logic. CVE-2020-3838: Dayton Pidhirney (@_watbulb) Additional recognition Photos Storage We would like to acknowledge Salman Husain of UC Berkeley for their assistance. Installation note: macOS Catalina 10.15.3, Security Update 2020-001 Mojave, and Security Update 2020-001 High Sierra may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEM5FaaFRjww9EJgvRBz4uGe3y0M0FAl4wsjUACgkQBz4uGe3y 0M1CeQ//ZJ/ZlrPF1P8nFvUy5XnOEgSt5U3W3klWT1x7B7s5NOQQkh+Iw02+dkYZ hErXRA1Awvzw4SpOOoG1HiElt2qz1+N8NaKgg4+Evk1CPB3KaX9g8l+PBFSKyVqU GQUSlsPB2GXky92moq0TtFO9VCwsPbQfj/618RzUn/CSF5ifNI+fMdWAfrndZSRv yg6XndljJx7Ro1OeQI794Aa1KdxdErbqnai+i++gGAiKG8zg89HLxhwaEje0u59M 35iAp9HAksZwOD/YOWkhiksXjS/89qtyt2z3yrpSUh8s1f86NumMre6D2C9kwY1c 8XlaCN/KE8BGMXzg+daMibpeaIoweeObfw6tT8QlF2OtxKtnvm55C1nIIYKlVqen GS11EkWweC9ZAEepVaBML95JEmaSin13oTvRg2s+DaiLE/RsRxz09qLqdyj1sbdf 2Gyl9xnTPjcDuhvbaGZl/uIEHIkgpLnNrs3bVkUOQwJZU8hpFcE1jwgGwNo8Nkwz TCAi0s4+q7csgZuTOlHroXTteFm+UQcV4Sw7YCZ2Z3kNDkEJpDDf8PEWGrGyJa8p iZJ4FqP0D9pv0N161V6f6xZ6QZW379tZfAeEHeoIE6lAfDN7BnENsuph10dvK9IT 1HlUvSj57BkM6b4BcoT9WjyFIWNp3T7ySJ+K15PHXx707SX1R9w= =toYN -----END PGP SIGNATURE-----=

Trust: 2.07

sources: NVD: CVE-2020-3846 // JVNDB: JVNDB-2020-002352 // VULHUB: VHN-181971 // VULMON: CVE-2020-3846 // PACKETSTORM: 156153 // PACKETSTORM: 156131 // PACKETSTORM: 156152

AFFECTED PRODUCTS

vendor:applemodel:iphone osscope:ltversion:13.3.1

Trust: 1.0

vendor:applemodel:itunesscope:ltversion:12.10.4

Trust: 1.0

vendor:applemodel:watchosscope:ltversion:6.1.2

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.15.3

Trust: 1.0

vendor:applemodel:icloudscope:gteversion:10.0

Trust: 1.0

vendor:applemodel:icloudscope:ltversion:7.17

Trust: 1.0

vendor:applemodel:tvosscope:ltversion:13.3.1

Trust: 1.0

vendor:applemodel:icloudscope:ltversion:10.8

Trust: 1.0

vendor:applemodel:ipadosscope:ltversion:13.3.1

Trust: 1.0

vendor:applemodel:iosscope:eqversion:13.3.1 未満 (ipod touch 第 7 世代)

Trust: 0.8

vendor:applemodel:iosscope:eqversion:13.3.1 未満 (iphone 6s 以降)

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.13.6

Trust: 0.8

vendor:applemodel:ipadosscope:eqversion:13.3.1 未満 (ipad air 2 以降)

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.14.6

Trust: 0.8

vendor:applemodel:icloudscope:eqversion:for windows 7.17 未満 (windows 7 以降)

Trust: 0.8

vendor:applemodel:tvosscope:eqversion:13.3.1 未満 (apple tv hd)

Trust: 0.8

vendor:applemodel:tvosscope:eqversion:13.3.1 未満 (apple tv 4k)

Trust: 0.8

vendor:applemodel:ipadosscope:eqversion:13.3.1 未満 (ipad mini 4 以降)

Trust: 0.8

vendor:applemodel:itunesscope:eqversion:for windows 12.10.4 未満 (windows 7 以降)

Trust: 0.8

vendor:applemodel:watchosscope:eqversion:6.1.2 未満 (apple watch series 1 以降 )

Trust: 0.8

vendor:applemodel:mac os xscope:eqversion:10.15.2

Trust: 0.8

vendor:applemodel:icloudscope:eqversion:for windows 10.9.2 未満 (windows 10 以降)

Trust: 0.8

sources: JVNDB: JVNDB-2020-002352 // NVD: CVE-2020-3846

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-3846
value: HIGH

Trust: 1.0

NVD: JVNDB-2020-002352
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202001-1421
value: HIGH

Trust: 0.6

VULHUB: VHN-181971
value: MEDIUM

Trust: 0.1

VULMON: CVE-2020-3846
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-3846
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

NVD: JVNDB-2020-002352
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

VULHUB: VHN-181971
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-3846
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: JVNDB-2020-002352
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-181971 // VULMON: CVE-2020-3846 // JVNDB: JVNDB-2020-002352 // CNNVD: CNNVD-202001-1421 // NVD: CVE-2020-3846

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.1

problemtype:CWE-20

Trust: 1.1

problemtype:CWE-91

Trust: 0.9

sources: VULHUB: VHN-181971 // JVNDB: JVNDB-2020-002352 // NVD: CVE-2020-3846

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202001-1421

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202001-1421

CONFIGURATIONS

sources: JVNDB: JVNDB-2020-002352

PATCH

title:HT210921url:https://support.apple.com/en-us/HT210921

Trust: 0.8

title:HT210923url:https://support.apple.com/en-us/HT210923

Trust: 0.8

title:HT210947url:https://support.apple.com/en-us/HT210947

Trust: 0.8

title:HT210948url:https://support.apple.com/en-us/HT210948

Trust: 0.8

title:HT210918url:https://support.apple.com/en-us/HT210918

Trust: 0.8

title:HT210919url:https://support.apple.com/en-us/HT210919

Trust: 0.8

title:HT210920url:https://support.apple.com/en-us/HT210920

Trust: 0.8

title:HT210923url:https://support.apple.com/ja-jp/HT210923

Trust: 0.8

title:HT210947url:https://support.apple.com/ja-jp/HT210947

Trust: 0.8

title:HT210948url:https://support.apple.com/ja-jp/HT210948

Trust: 0.8

title:HT210918url:https://support.apple.com/ja-jp/HT210918

Trust: 0.8

title:HT210919url:https://support.apple.com/ja-jp/HT210919

Trust: 0.8

title:HT210920url:https://support.apple.com/ja-jp/HT210920

Trust: 0.8

title:HT210921url:https://support.apple.com/ja-jp/HT210921

Trust: 0.8

title:Multiple Apple product libxml2 Fixes for component security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=111060

Trust: 0.6

title:Apple: iCloud for Windows 10.9.2url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=6f99a2e7d9bf52dbb79855c809643849

Trust: 0.1

title:Apple: iCloud for Windows 7.17url:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=06b3f4f52a61a7b8c58c6a5026dc6dea

Trust: 0.1

title:Apple: macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierraurl:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=0edbb02c87b058bc4d318b014c408f83

Trust: 0.1

sources: VULMON: CVE-2020-3846 // JVNDB: JVNDB-2020-002352 // CNNVD: CNNVD-202001-1421

EXTERNAL IDS

db:NVDid:CVE-2020-3846

Trust: 2.9

db:JVNid:JVNVU95678717

Trust: 0.8

db:JVNDBid:JVNDB-2020-002352

Trust: 0.8

db:CNNVDid:CNNVD-202001-1421

Trust: 0.7

db:PACKETSTORMid:156153

Trust: 0.7

db:AUSCERTid:ESB-2020.0351

Trust: 0.6

db:CNVDid:CNVD-2020-15547

Trust: 0.1

db:VULHUBid:VHN-181971

Trust: 0.1

db:VULMONid:CVE-2020-3846

Trust: 0.1

db:PACKETSTORMid:156131

Trust: 0.1

db:PACKETSTORMid:156152

Trust: 0.1

sources: VULHUB: VHN-181971 // VULMON: CVE-2020-3846 // JVNDB: JVNDB-2020-002352 // PACKETSTORM: 156153 // PACKETSTORM: 156131 // PACKETSTORM: 156152 // CNNVD: CNNVD-202001-1421 // NVD: CVE-2020-3846

REFERENCES

url:https://support.apple.com/ht210947

Trust: 1.8

url:https://support.apple.com/ht210948

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2020-3846

Trust: 1.7

url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-3846

Trust: 0.8

url:https://jvn.jp/vu/jvnvu95678717/

Trust: 0.8

url:https://support.apple.com/en-us/ht210919

Trust: 0.6

url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-31449

Trust: 0.6

url:https://support.apple.com/en-us/ht210947

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2020.0351/

Trust: 0.6

url:https://packetstormsecurity.com/files/156153/apple-security-advisory-2020-1-29-1.html

Trust: 0.6

url:https://support.apple.com/en-us/ht210921

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2020-3826

Trust: 0.3

url:https://support.apple.com/kb/ht201222

Trust: 0.3

url:https://www.apple.com/support/security/pgp/

Trust: 0.3

url:https://support.apple.com/ht204283

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-3825

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-3865

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-3867

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-3868

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-3862

Trust: 0.2

url:https://cwe.mitre.org/data/definitions/119.html

Trust: 0.1

url:https://cwe.mitre.org/data/definitions/20.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://support.apple.com/kb/ht210947

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3839

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3849

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-11043

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3835

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3842

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3837

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3845

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3870

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3827

Trust: 0.1

url:https://support.apple.com/downloads/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3848

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3856

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-18634

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3866

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3857

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3840

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3871

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3855

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3850

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3854

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3853

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3843

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3847

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3838

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3830

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3836

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3829

Trust: 0.1

sources: VULHUB: VHN-181971 // VULMON: CVE-2020-3846 // JVNDB: JVNDB-2020-002352 // PACKETSTORM: 156153 // PACKETSTORM: 156131 // PACKETSTORM: 156152 // CNNVD: CNNVD-202001-1421 // NVD: CVE-2020-3846

CREDITS

Apple,Ranier Vilela

Trust: 0.6

sources: CNNVD: CNNVD-202001-1421

SOURCES

db:VULHUBid:VHN-181971
db:VULMONid:CVE-2020-3846
db:JVNDBid:JVNDB-2020-002352
db:PACKETSTORMid:156153
db:PACKETSTORMid:156131
db:PACKETSTORMid:156152
db:CNNVDid:CNNVD-202001-1421
db:NVDid:CVE-2020-3846

LAST UPDATE DATE

2024-11-23T19:48:26.831000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-181971date:2021-07-21T00:00:00
db:VULMONid:CVE-2020-3846date:2021-07-21T00:00:00
db:JVNDBid:JVNDB-2020-002352date:2020-03-12T00:00:00
db:CNNVDid:CNNVD-202001-1421date:2021-11-03T00:00:00
db:NVDid:CVE-2020-3846date:2024-11-21T05:31:49.840

SOURCES RELEASE DATE

db:VULHUBid:VHN-181971date:2020-02-27T00:00:00
db:VULMONid:CVE-2020-3846date:2020-02-27T00:00:00
db:JVNDBid:JVNDB-2020-002352date:2020-03-12T00:00:00
db:PACKETSTORMid:156153date:2020-01-30T14:46:35
db:PACKETSTORMid:156131date:2020-01-29T17:17:36
db:PACKETSTORMid:156152date:2020-01-30T14:46:23
db:CNNVDid:CNNVD-202001-1421date:2020-01-30T00:00:00
db:NVDid:CVE-2020-3846date:2020-02-27T21:15:17.257