1. Home
  2. CVE Database
  3. CVE-2020-11104
MEDIUM · 5.3

CVE-2020-11104

An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or hea...

Vulnerability Description

An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or heap memory, from which sensitive information (such as memory layout or private keys) can be gleaned if the archive is distributed outside of a trusted context.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
UscCereal<= 1.3.0

Related Weaknesses (CWE)

CWE-908

References

FAQ

What is CVE-2020-11104?

CVE-2020-11104 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or hea...

How severe is CVE-2020-11104?

CVE-2020-11104 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-11104?

Check the references section above for vendor advisories and patch information. Affected products include: Usc Cereal.