Skip to content
fr Sign in
Not rated

CVE-2020-3840 An off by one issue existed in the handling of racoon configuration files

Description

An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1. Loading a maliciously crafted racoon configuration file may lead to arbitrary code execution.

Affected products and versions

Product Affected versions Fixed in
iOS Versions not published
macOS Versions not published
tvOS Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of iOS

The 507 CVEs of iOS →
CVE-2024-44229 An information leakage was addressed with additional validation 5.3 Medium CVE-2024-44218 This issue was addressed with improved checks 7.8 High CVE-2024-40867 A custom URL scheme handling issue was addressed with improved input validation 8.8 High CVE-2024-44259 This issue was addressed through improved state management 8.8 High
Track this CVE