CVE-2020-3840

An off by one issue existed in the handling of racoon configuration files

published February 27, 2020

CVSS
—
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1. Loading a maliciously crafted racoon configuration file may lead to arbitrary code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01136 · 66.3th percentile
Published
2020-02-27T20:45Z
EPSS history
Timeline
  • 27 FEB 20:45Z
    An off by one issue existed in the handling of racoon configuration files
    cvelistv5