CVE-2020-8945: fedoraproject fedora Use After Free

Modified

AliasesRHBA-2020:1255RHSA-2020:0679RHSA-2020:0689+9 more

Published 12-02-2020Last modified 04-08-2024

Vulnerability summary

CVE-2020-8945 is a high (CVSS 7.5) Use After Free vulnerability in fedoraproject fedora. EPSS estimates a 5.07% chance of exploitation in the next 30 days, higher than 92.3% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (GitHub, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

5.07%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1github

Advisory lineage

Upstream 0 · Downstream 7

RHSA-2020:1234 RHSA-2020:1396 RHSA-2020:1937 RHSA-2020:2117 RHSA-2020:2413 RHSA-2020:2927+1 more

Timeline

12-02-2020
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.

CVSS metrics

6 scores · 5 sources · 2 versions

v3.17.5v2.05.1

EPSS trend

Probability

5.07%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

No change 0.00 pp

From 5.07% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

githubUnverified
Gpgme
Maturity: poc

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat19 products

enterprise_linux_for_ibm_z_systems7.0
enterprise_linux_for_power_little_endian7.0
enterprise_linux_server7.0
enterprise_linux_workstation7.0
openshift_container_platform3.11 | 4.1 | 4.2 | 4.3 | 4.4 | 4.5

Show all 19

Ubuntu2 products

golang-github-proglottis-gpgmeAll versions (No fix recorded)
singularity-containerAll versions (No fix recorded)

Debian1 product

golang-github-proglottis-gpgme< 0.1.1-1

Fedoraproject1 product

fedoraEOL30 | 31 | 32

Github.com/proglottis1 product

gpgme< 0.1.1

Gpgme_project1 product

gpgme< 0.1.1

6 vendors · 25 products

References

43 links

github.com/proglottis/gpgme/pull/23X Refsource MISCREPORTWEBFIXExploitPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1795838X Refsource MISCREPORTWEBIssue TrackingPatchThird Party Advisory
github.com/proglottis/gpgme/compare/v0.1.0...v0.1.1X Refsource MISCREPORTWEBPatchThird Party Advisory
github.com/containers/image/commit/4c7a23f82ef09127b0ff28366d1cf31316dd6cc1X Refsource MISCREPORTWEBPatchThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
access.redhat.com/errata/RHSA-2020:0679Vendor AdvisoryX Refsource REDHATAdvisoryWEBThird Party Advisory
access.redhat.com/errata/RHSA-2020:0689Vendor AdvisoryX Refsource REDHATAdvisoryWEBThird Party Advisory
access.redhat.com/errata/RHSA-2020:0697Vendor AdvisoryX Refsource REDHATAdvisoryWEBThird Party Advisory

Show all 43 references