Lucene search
F5CVELIST:CVE-2020-5895HistoryMay 07, 2020 - 12:28 p.m.
CVE-2020-5895
2020-05-0712:28:24
f5
www.cve.org
5
EPSS
0
Percentile
12.6%
On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the socket. A local system attacker can make AVRD segmentation fault (SIGSEGV) by writing malformed messages to the socket.
CNA Affected
[
{
"product": "NGINX Controller",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "< 3.4.0"
}
]
}
]Related
nvd
nvd
CVE-2020-5895
2020-05-07 13:15:12
f5
f5
K95120415 : NGINX Controller AVRD vulnerability CVE-2020-5895
2020-05-06 00:00:00
cve
cve
CVE-2020-5895
2020-05-07 13:15:12
prion
prion
Design/Logic Flaw
2020-05-07 13:15:00