An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1. Loading a maliciously crafted racoon configuration file may lead to arbitrary code execution.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2020-02-27T20:45:04

Updated: 2024-08-04T07:44:51.195Z

Reserved: 2019-12-18T00:00:00

Link: CVE-2020-3840

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-02-27T21:15:16.833

Modified: 2024-11-21T05:31:49.210

Link: CVE-2020-3840

cve-icon Redhat

No data.