CVE-2020-29394

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 30, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-293956.1The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.CVE-2020-293968.8A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows CVE-2020-29407.1Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications (component: User ICVE-2020-29417.1Vulnerability in the Oracle Financial Services Funds Transfer Pricing product of Oracle Financial Services Applications (component: User IntCVE-2020-29427.1Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications (component: UsCVE-2020-29437.1Vulnerability in the Oracle Financial Services Liquidity Risk Measurement and Management product of Oracle Financial Services Applications (CVE-2020-294366.5Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content ouCVE-2020-294378.1SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orCVE-2020-294386.5Tesla Model X vehicles before 2020-11-23 have key fobs that accept firmware updates without signature verification. This allows attackers toCVE-2020-294394.6Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module CVE-2020-29448.8Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected CVE-2020-294404.6Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control
CVE-2020-29394: High severity, CVSS 7.8 | Vulnix