CVE-2020-3909

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit_software:8.8:*:*:*:*:*:*:*

History

21 Nov 2024, 05:31

Type Values Removed Values Added
References () https://support.apple.com/HT211100 - Vendor Advisory () https://support.apple.com/HT211100 - Vendor Advisory
References () https://support.apple.com/HT211101 - Vendor Advisory () https://support.apple.com/HT211101 - Vendor Advisory
References () https://support.apple.com/HT211102 - Vendor Advisory () https://support.apple.com/HT211102 - Vendor Advisory
References () https://support.apple.com/HT211103 - Vendor Advisory () https://support.apple.com/HT211103 - Vendor Advisory
References () https://support.apple.com/HT211105 - Vendor Advisory () https://support.apple.com/HT211105 - Vendor Advisory
References () https://support.apple.com/HT211106 - Vendor Advisory () https://support.apple.com/HT211106 - Vendor Advisory
References () https://support.apple.com/HT211107 - Vendor Advisory () https://support.apple.com/HT211107 - Vendor Advisory
References () https://www.oracle.com/security-alerts/cpuoct2020.html - Third Party Advisory () https://www.oracle.com/security-alerts/cpuoct2020.html - Third Party Advisory

Information

Published : 2020-04-01 18:15

Updated : 2024-11-21 05:31


NVD link : CVE-2020-3909

Mitre link : CVE-2020-3909

CVE.ORG link : CVE-2020-3909


JSON object : View

Products Affected

apple

  • mac_os_x
  • icloud
  • watchos
  • itunes
  • iphone_os
  • ipados
  • tvos

oracle

  • sun_zfs_storage_appliance_kit_software
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')