7.8

CVE-2020-8249

A vulnerability in the Pulse Secure Desktop Client (Linux) < 9.1R9 could allow local attackers to perform buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pulsesecure ≫ Pulse Secure Desktop Client SwPlatform linux Version < 9.1
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r2 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r3 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r3.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r4.2 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r5 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r6 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r7 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r7.1 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r8 SwPlatform linux
Pulsesecure ≫ Pulse Secure Desktop Client Version 9.1 Update r8.2 SwPlatform linux
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.4
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
Vendor Advisory