CVE-2020-3898: Input Validation
A heap-based buffer overflow was discovered in in libcups's ppdFindOption() function in ppd-mark.c:430. The issue can be reproduced by loading a crafted ppd file and calling the ppdMarkDefaults() libcups API function.
Other sources
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.
— Launchpad
Apple CUPS is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the libcups's ppdFindOption() function in ppd-mark.c. By persuading a victim to open a specially crafted ppd file, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
— IBM
CUPS. A memory corruption issue was addressed with improved validation.
Credit
Affected Software
Remediation
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2020-9772
- CVE-2020-3903
- CVE-2020-3904
- CVE-2020-3883
- CVE-2020-6616
- CVE-2020-9853
- CVE-2020-3907
- CVE-2020-3908
- CVE-2020-3912
- CVE-2020-9779
- CVE-2020-3892
- CVE-2020-3893
- CVE-2020-3905
- CVE-2019-8853
- CVE-2020-9776
- CVE-2020-9828
- CVE-2020-3913
- CVE-2020-9829
- CVE-2020-3898
- CVE-2020-3881
- CVE-2020-3886
- CVE-2019-14615
- CVE-2020-3919
- CVE-2020-3851
- CVE-2020-3896
- CVE-2020-3914
- CVE-2020-9785
- CVE-2020-3909
- CVE-2020-3911
- CVE-2020-3910
- CVE-2020-3884
- CVE-2020-3915
- CVE-2020-9775
- CVE-2020-9771
- CVE-2020-3918
- CVE-2019-19232
- CVE-2020-9786
- CVE-2020-3906
- CVE-2020-3889
- CVE-2020-9769
- CVE-2020-9787
- CVE-2020-3902
Frequently Asked Questions
What is CVE-2020-3898?
CVE-2020-3898 is a vulnerability in CUPS that allows for memory corruption due to improper validation.
Who does CVE-2020-3898 affect?
CVE-2020-3898 affects users of Apple macOS Catalina (10.15.4), Mojave, and High Sierra.
What is the severity level of CVE-2020-3898?
The severity level of CVE-2020-3898 has not been provided in the information provided.
How can I fix CVE-2020-3898?
To fix CVE-2020-3898, update your macOS to the latest version provided by Apple.
Where can I find more information about CVE-2020-3898?
You can find more information about CVE-2020-3898 on the Apple support website.