CVE:CVE-2020-6860
CNNVD:CNNVD-202001-411
libmysofa是一款用于读取AES SOFA文件的库。
libmysofa 0.9.1版本中的hdf/dataobject.c文件的‘readDataVar’函数存在缓冲区错误漏洞。远程攻击者可利用该漏洞导致应用程序崩溃。
solution:Upgrade symonics libmysofa to a higher version than 0.9.1,and avoid the version 0.9.1; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35