Vulnerability-Lookup

CVE-2020-0435 (GCVE-0-2020-0435)

Vulnerability from cvelistv5 – Published: 2020-09-17 18:47 – Updated: 2020-09-24 14:06

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2020-09-24T14:06:52",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2020-0435",
    "datePublished": "2020-09-17T18:47:04",
    "dateRejected": "2020-09-24T14:06:52",
    "dateReserved": "2019-10-17T00:00:00",
    "dateUpdated": "2020-09-24T14:06:52",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.0",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2020-0435\",\"sourceIdentifier\":\"security@android.com\",\"published\":\"2020-09-17T19:15:13.423\",\"lastModified\":\"2023-11-07T03:13:53.600\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage\"}],\"metrics\":{},\"references\":[]}}"
  }
}

CERTFR-2020-AVI-554

Vulnerability from certfr_avis - Published: 2020-09-09 - Updated: 2020-09-09

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Google	Android	Google Android toutes versions sans le correctif de sécurité du 08 septembre 2020

References

Title

Publication Time

Tags

Bulletin de sécurité Android du 08 septembre 2020	None	vendor-advisory
Bulletin de sécurité Pixel du 08 septembre 2020	None	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Google Android toutes versions sans le correctif de s\u00e9curit\u00e9 du 08 septembre 2020",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-0395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0395"
    },
    {
      "name": "CVE-2020-0385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0385"
    },
    {
      "name": "CVE-2019-13995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13995"
    },
    {
      "name": "CVE-2019-10518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10518"
    },
    {
      "name": "CVE-2020-11609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11609"
    },
    {
      "name": "CVE-2020-12114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12114"
    },
    {
      "name": "CVE-2020-3674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3674"
    },
    {
      "name": "CVE-2020-0435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0435"
    },
    {
      "name": "CVE-2019-2284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-2284"
    },
    {
      "name": "CVE-2020-0434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0434"
    },
    {
      "name": "CVE-2019-10498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10498"
    },
    {
      "name": "CVE-2019-14099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14099"
    },
    {
      "name": "CVE-2020-0391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0391"
    },
    {
      "name": "CVE-2020-0384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0384"
    },
    {
      "name": "CVE-2020-3671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3671"
    },
    {
      "name": "CVE-2020-0394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0394"
    },
    {
      "name": "CVE-2019-13994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13994"
    },
    {
      "name": "CVE-2020-0342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0342"
    },
    {
      "name": "CVE-2020-0407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0407"
    },
    {
      "name": "CVE-2019-14901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14901"
    },
    {
      "name": "CVE-2020-0074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0074"
    },
    {
      "name": "CVE-2019-10628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10628"
    },
    {
      "name": "CVE-2020-0404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0404"
    },
    {
      "name": "CVE-2019-14896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14896"
    },
    {
      "name": "CVE-2020-3629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3629"
    },
    {
      "name": "CVE-2020-0229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0229"
    },
    {
      "name": "CVE-2020-0245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0245"
    },
    {
      "name": "CVE-2020-0428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0428"
    },
    {
      "name": "CVE-2020-3613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3613"
    },
    {
      "name": "CVE-2020-8649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8649"
    },
    {
      "name": "CVE-2019-13992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13992"
    },
    {
      "name": "CVE-2020-0386",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0386"
    },
    {
      "name": "CVE-2019-2290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-2290"
    },
    {
      "name": "CVE-2020-0387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0387"
    },
    {
      "name": "CVE-2020-3620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3620"
    },
    {
      "name": "CVE-2020-0430",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0430"
    },
    {
      "name": "CVE-2019-10596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10596"
    },
    {
      "name": "CVE-2020-0123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0123"
    },
    {
      "name": "CVE-2020-0403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0403"
    },
    {
      "name": "CVE-2020-0392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0392"
    },
    {
      "name": "CVE-2020-0390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0390"
    },
    {
      "name": "CVE-2020-0383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0383"
    },
    {
      "name": "CVE-2019-10527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10527"
    },
    {
      "name": "CVE-2019-5489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5489"
    },
    {
      "name": "CVE-2020-3634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3634"
    },
    {
      "name": "CVE-2020-0432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0432"
    },
    {
      "name": "CVE-2020-0401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0401"
    },
    {
      "name": "CVE-2020-0433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0433"
    },
    {
      "name": "CVE-2019-10629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10629"
    },
    {
      "name": "CVE-2019-10564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10564"
    },
    {
      "name": "CVE-2020-11133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11133"
    },
    {
      "name": "CVE-2020-11129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11129"
    },
    {
      "name": "CVE-2020-0278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0278"
    },
    {
      "name": "CVE-2020-0389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0389"
    },
    {
      "name": "CVE-2020-0382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0382"
    },
    {
      "name": "CVE-2019-14117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14117"
    },
    {
      "name": "CVE-2020-0397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0397"
    },
    {
      "name": "CVE-2019-14074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14074"
    },
    {
      "name": "CVE-2020-0388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0388"
    },
    {
      "name": "CVE-2020-3656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3656"
    },
    {
      "name": "CVE-2020-0396",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0396"
    },
    {
      "name": "CVE-2020-7053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-7053"
    },
    {
      "name": "CVE-2020-11124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11124"
    },
    {
      "name": "CVE-2020-3617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3617"
    },
    {
      "name": "CVE-2020-0381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0381"
    },
    {
      "name": "CVE-2020-0399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0399"
    },
    {
      "name": "CVE-2020-11135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11135"
    },
    {
      "name": "CVE-2020-0393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0393"
    },
    {
      "name": "CVE-2020-0402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0402"
    },
    {
      "name": "CVE-2020-3679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3679"
    },
    {
      "name": "CVE-2020-0379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0379"
    },
    {
      "name": "CVE-2019-10521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10521"
    },
    {
      "name": "CVE-2020-0429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0429"
    },
    {
      "name": "CVE-2019-14895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14895"
    },
    {
      "name": "CVE-2020-0380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0380"
    },
    {
      "name": "CVE-2020-0427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0427"
    },
    {
      "name": "CVE-2020-0431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-0431"
    },
    {
      "name": "CVE-2020-3622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3622"
    },
    {
      "name": "CVE-2020-3621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3621"
    },
    {
      "name": "CVE-2019-10519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10519"
    },
    {
      "name": "CVE-2020-12826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12826"
    }
  ],
  "initial_release_date": "2020-09-09T00:00:00",
  "last_revision_date": "2020-09-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-554",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-09-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code\narbitraire \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Android du 08 septembre 2020",
      "url": "https://source.android.com/security/bulletin/2020-09-01"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Pixel du 08 septembre 2020",
      "url": "https://source.android.com/security/bulletin/pixel/2020-09-01"
    }
  ]
}

GHSA-RCV9-9VHW-RMQR

Vulnerability from github – Published: 2022-05-24 17:28 – Updated: 2022-05-24 17:28

Details

In inline_data_addr of f2fs.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133762747

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2020-0435"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2020-09-17T19:15:00Z",
    "severity": null
  },
  "details": "In inline_data_addr of f2fs.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-133762747",
  "id": "GHSA-rcv9-9vhw-rmqr",
  "modified": "2022-05-24T17:28:50Z",
  "published": "2022-05-24T17:28:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-0435"
    },
    {
      "type": "WEB",
      "url": "https://source.android.com/security/bulletin/pixel/2020-09-01"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2020-0435

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Aliases

CVE-2020-0435

Aliases

CVE-2020-0435

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2020-0435",
    "description": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
    "id": "GSD-2020-0435",
    "references": [
      "https://www.suse.com/security/cve/CVE-2020-0435.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2020-0435"
      ],
      "details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
      "id": "GSD-2020-0435",
      "modified": "2023-12-13T01:21:44.479176Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2020-0435",
        "STATE": "REJECT"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
          }
        ]
      }
    }
  }
}

FKIE_CVE-2020-0435

Vulnerability from fkie_nvd - Published: 2020-09-17 19:15 - Updated: 2023-11-07 03:13

Severity ?

Summary

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

References

	URL	Tags

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
    }
  ],
  "id": "CVE-2020-0435",
  "lastModified": "2023-11-07T03:13:53.600",
  "metrics": {},
  "published": "2020-09-17T19:15:13.423",
  "references": [],
  "sourceIdentifier": "security@android.com",
  "vulnStatus": "Rejected"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2020-0435 (GCVE-0-2020-0435)

CERTFR-2020-AVI-554

Solution

GHSA-RCV9-9VHW-RMQR

GSD-2020-0435

FKIE_CVE-2020-0435

Tags

Sightings

Nomenclature