What’s Vulnerable › Vulnerabilities

CVE-2020-29394

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-11-30 · updated 2026-06-17
• Weakness: CWE-787

Description

A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).

Affected products

• Debian Linux: 10.0
• GENIVI Diagnostic Log And Trace: through 2.18.5

References

• https://github.com/GENIVI/dlt-daemon/issues/274
• https://github.com/GENIVI/dlt-daemon/pull/275
• https://github.com/GENIVI/dlt-daemon/pull/288
• https://lists.debian.org/debian-lts-announce/2022/12/msg00016.html
• https://github.com/GENIVI/dlt-daemon/issues/274
• https://github.com/GENIVI/dlt-daemon/pull/275
• https://github.com/GENIVI/dlt-daemon/pull/288
• https://lists.debian.org/debian-lts-announce/2022/12/msg00016.html

Get alerted when CVE-2020-29394 or the next vulnerability affects your stack