This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-36149 →

DEBIAN-CVE-2020-36149

Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation...

Original description

The description as published by the source.

Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libmysofa

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~dfsg0-1"}]}]

Debian:13 libmysofa

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~dfsg0-1"}]}]

Debian:14 libmysofa

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~dfsg0-1"}]}]

References

advisory security-tracker.debian.org