Wind River Support Network

HomeDefectsLIN8-12435

Fixed

LIN8-12435 : Security Advisory - apt - CVE-2020-3810

Created: May 17, 2020 Updated: Jul 1, 2020

Resolved Date: Jun 23, 2020

Found In Version: 8.0.0.1

Fix Version: 8.0.0.34

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

CREATE(Triage):(User=admin) [CVE-2020-3810|https://nvd.nist.gov/vuln/detail/CVE-2020-3810]

CVEs

CVE-2020-3810