CVE-2020-0008
published 2020-01-08CVE-2020-0008: In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local…
PriorityP419medium4.7CVSS 3.1
AVLACHPRLUINSUCHINAN
EPSS
0.12%
1.9th percentile
In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142558228
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.01.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hcx7-hm8x-rv46: In LowEnergyClient::MtuChangedCallback of low_energy_client
ghsa_unreviewed·2022-05-24
CVE-2020-0008 [LOW] CWE-362 GHSA-hcx7-hm8x-rv46: In LowEnergyClient::MtuChangedCallback of low_energy_client
In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142558228
Palo Alto
PAN-SA-2024-0008 Informational Bulletin: Impact of OSS CVEs in PAN-OS
vendor_paloalto·2024-09-04·CVSS 6.0
CVE-2022-22965 [MEDIUM] PAN-SA-2024-0008 Informational Bulletin: Impact of OSS CVEs in PAN-OS
PAN-SA-2024-0008 Informational Bulletin: Impact of OSS CVEs in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS software. While PAN-OS software may include the
CVEs: CVE-2010-1622, CVE-2015-7552, CVE-2018-16840, CVE-2019-7639, CVE-2020-17049, CVE-2020-7774, CVE-2021-0131, CVE-2021-0132, CVE-2021-0133, CVE-2021-0134, CVE-2021-4044, CVE-2021-4160, CVE-2021-41773, CVE-2022-1343, CVE-2022-21449, CVE-2022-2274, CVE-2022-22963, CVE-2022-22965, CVE-2022-24697, CVE-2022-32207, CVE-2022-3358, CVE-2022-3996, CVE-2022-40664, CVE-2022-44792, CVE-2022-44793, CVE-2023-1255, CVE-2023-22809, CVE-2023-23919, CVE-2023-3341, CVE-2023-4236, CVE-2023-4863, CVE-2023-51767
Affected products: PAN-OS
VMware
VMware ESXi patches address Stored Cross-Site Scripting (XSS) vulnerability (CVE-2020-3955)
vendor_vmware·2020-04-28·CVSS 9.3
CVE-2020-3955 [CRITICAL] VMware ESXi patches address Stored Cross-Site Scripting (XSS) vulnerability (CVE-2020-3955)
VMSA-2020-0008: VMware ESXi patches address Stored Cross-Site Scripting (XSS) vulnerability (CVE-2020-3955)
The VMware ESXi Host Client does not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.
CVEs: CVE-2020-3955
Affected products: VMware ESXi, VMware vSphere
Android
CVE-2020-0008: Android Security Bulletin 2020-01-01
CVE: CVE-2020-0008
Severity: HIGH
Type: ID
Affected AOSP versions: 8
vendor_android·2020-01-01·CVSS 4.7
CVE-2020-0008 [MEDIUM] CVE-2020-0008: Android Security Bulletin 2020-01-01
CVE: CVE-2020-0008
Severity: HIGH
Type: ID
Affected AOSP versions: 8
Android Security Bulletin 2020-01-01
CVE: CVE-2020-0008
Severity: HIGH
Type: ID
Affected AOSP versions: 8.0, 8.1, 9, 10
References: A-142558228
No detection rules found.
Nuclei
Onkyo TX-NR585 Web Interface - Directory Traversal
nuclei·CVSS 7.5
CVE-2020-12447 [HIGH] Onkyo TX-NR585 Web Interface - Directory Traversal
Onkyo TX-NR585 Web Interface - Directory Traversal
Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal and local file inclusion.
Template:
id: CVE-2020-12447
info:
name: Onkyo TX-NR585 Web Interface - Directory Traversal
author: 0x_Akoko
severity: high
description: Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal and local file inclusion.
impact: |
An attacker can access sensitive files on the system, potentially leading to unauthorized access, information disclosure, or further exploitation.
remediation: |
Apply the latest firmware update provided by the vendor to fix the direc
No writeups or analysis indexed.
2020-01-08
Published