CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2020-36619

A vulnerability was found in multimon-ng. It has been rated as critical. This issue affects the function add_ch of the file demod_flex.c. The manipulation of the argument ch leads to format string. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is e5a51c508ef952e81a6da25b43034dd1ed023c07. It is recommended to upgrade the affected component. The identifier VDB-216269 was assigned to this vulnerability.

Score
5.5 medium
Published
2022-12-19
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
comms/multimon-ngmultimon-ng1.1.0_2unaddressedkevans@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>multimon-ng</name>
	<range><lt>1.2.0</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A vulnerability was found in multimon-ng. It has been rated as
	critical. This issue affects the function add_ch of the file
	demod_flex.c. The manipulation of the argument ch leads to format
	string. Upgrading to version 1.2.0 is able to address this issue. The
	name of the patch is e5a51c508ef952e81a6da25b43034dd1ed023c07. It is
	recommended to upgrade the affected component. The identifier
	VDB-216269 was assigned to this vulnerability.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2020-36619</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2020-36619</url>
    </references>
    <dates>
      <discovery>2022-12-19</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>