Back to Database
Status published
High
CVE-2020-29394
A buffer overflow in the dlt_filter_load function in dlt_common.c from...
Vulnerability Description
A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-29394
Credits & Attribution
No credits recorded in the NVD database.
References
More from genivi
View All →CVE-2022-39837
An issue was discovered in Connected Vehicle Systems Alliance (COVESA)...
Unknown
0
CVE-2022-39836
An issue was discovered in Connected Vehicle Systems Alliance (COVESA)...
Unknown
0
CVE-2022-31291
An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to...
High
7.5
CVE-2020-36244
The daemon in GENIVI diagnostic log and trace (DLT), is...
Critical
9.8
Affected Vendor
genivi
View all reports →Affected Software
diagnostic log and trace, debian linux
Vulnerable Versions:
0, 10.0
Timeline
Official Publish:
November 30th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.