CVE-2020-29394

NameCVE-2020-29394
DescriptionA buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-3231-1
Debian Bugs976228

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
dlt-daemon (PTS)bullseye2.18.6-1+deb11u1fixed
bookworm2.18.8-6fixed
sid, trixie2.18.10-10fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
dlt-daemonsourcebuster2.18.0-1+deb10u1DLA-3231-1
dlt-daemonsource(unstable)2.18.5-0.3976228

Notes

https://github.com/GENIVI/dlt-daemon/issues/274
https://github.com/GENIVI/dlt-daemon/pull/275
https://github.com/GENIVI/dlt-daemon/commit/ff4f44c159df6f44b48bd38c9d2f104eb360be11

Search for package or bug name: Reporting problems