cvelist/2020/1xxx/CVE-2020-1976.json

{
    "CVE_data_meta": {
        "ASSIGNER": "psirt@paloaltonetworks.com",
        "DATE_PUBLIC": "2020-02-12T17:00:00.000Z",
        "ID": "CVE-2020-1976",
        "STATE": "PUBLIC",
        "TITLE": "GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability."
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "product_name": "GlobalProtect",
                                "version": {
                                    "version_data": [
                                        {
                                            "platform": "Mac OS",
                                            "version_affected": "<=",
                                            "version_name": "5.0",
                                            "version_value": "5.0.5"
                                        },
                                        {
                                            "platform": "Mac OS",
                                            "version_affected": "!>=",
                                            "version_name": "5.0",
                                            "version_value": "5.0.6"
                                        }
                                    ]
                                }
                            }
                        ]
                    },
                    "vendor_name": "Palo Alto Networks"
                }
            ]
        }
    },
    "credit": [
        {
            "lang": "eng",
            "value": "This issue was discovered during a security test performed in collaboration with IOActive."
        }
    ],
    "data_format": "MITRE",
    "data_type": "CVE",
    "data_version": "4.0",
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5.0 on Mac OS."
            }
        ]
    },
    "generator": {
        "engine": "Vulnogram 0.0.9"
    },
    "impact": {
        "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-642 External Control of Critical State Data"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "url": "https://security.paloaltonetworks.com/CVE-2020-1976",
                "name": "https://security.paloaltonetworks.com/CVE-2020-1976"
            }
        ]
    },
    "solution": [
        {
            "lang": "eng",
            "value": "This issue is fixed in GlobalProtect 5.0.6, GlobalProtect 5.1.0, and all later versions.\n"
        }
    ],
    "source": {
        "defect": [
            "GPC-9616"
        ],
        "discovery": "INTERNAL"
    },
    "work_around": [
        {
            "lang": "eng",
            "value": "n/a"
        }
    ]
}