Ubuntu.comUB:CVE-2020-29509CVE-2020-29509
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.1%
The encoding/xml package in Go (all versions) does not correctly preserve
the semantics of attribute namespace prefixes during tokenization
round-trips, which allows an attacker to craft inputs that behave in
conflicting ways during different stages of processing in affected
downstream applications.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | Packages built using golang need to be rebuilt once the vulnerability has been fixed. This CVE entry does not list packages that need rebuilding outside of the main repository or the Ubuntu variants with PPA overlays. as of 2021-08-10, there likely won’t be a fix for this issue by the upstream go developers |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | golang-1.10 | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | golang-1.10 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | golang-1.10 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | golang-1.13 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | golang-1.13 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | golang-1.13 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | golang-1.13 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | golang-1.14 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | golang-1.6 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | golang-1.8 | < any | UNKNOWN |
References
github.com/russellhaering/gosaml2/security/advisories/GHSA-xhqq-x44f-9fgg
launchpad.net/bugs/cve/CVE-2020-29509
mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/
nvd.nist.gov/vuln/detail/CVE-2020-29509
security-tracker.debian.org/tracker/CVE-2020-29509
www.cve.org/CVERecord?id=CVE-2020-29509
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
43.1%