CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-27853

Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. This affects Wire AVS (Audio, Video, and Signaling) 5.3 through 6.x before 6.4, the Wire Secure Messenger application before 3.49.918 for Android, and the Wire Secure Messenger application before 3.61 for iOS. This occurs via the value parameter to sdp_media_set_lattr in peerflow/sdp.c.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.071

EPSS Ranking 91.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2020-27853

None » None » Version:

_and_signaling:*
None » None » Version:

_video
Wire » Wire » Version: 2.15.2750

cpe:2.3:a:wire:wire:2.15.2750
Wire » Wire » Version: 3.10.2904

cpe:2.3:a:wire:wire:3.10.2904
Wire » Wire » Version: 3.10.3133

cpe:2.3:a:wire:wire:3.10.3133
Wire » Wire » Version: 3.10.3138

cpe:2.3:a:wire:wire:3.10.3138
Wire » Wire » Version: 3.10.3215

cpe:2.3:a:wire:wire:3.10.3215
Wire » Wire » Version: 3.11.2912

cpe:2.3:a:wire:wire:3.11.2912
Wire » Wire » Version: 3.11.3259

cpe:2.3:a:wire:wire:3.11.3259
Wire » Wire » Version: 3.12.2916

cpe:2.3:a:wire:wire:3.12.2916
Wire » Wire » Version: 3.12.3423

cpe:2.3:a:wire:wire:3.12.3423
Wire » Wire » Version: 3.12.3490

cpe:2.3:a:wire:wire:3.12.3490
Wire » Wire » Version: 3.15.2922

cpe:2.3:a:wire:wire:3.15.2922
Wire » Wire » Version: 3.15.3551

cpe:2.3:a:wire:wire:3.15.3551
Wire » Wire » Version: 3.15.3621

cpe:2.3:a:wire:wire:3.15.3621
Wire » Wire » Version: 3.16.2923

cpe:2.3:a:wire:wire:3.16.2923
Wire » Wire » Version: 3.16.3562

cpe:2.3:a:wire:wire:3.16.3562
Wire » Wire » Version: 3.16.3630

cpe:2.3:a:wire:wire:3.16.3630
Wire » Wire » Version: 3.17.2924

cpe:2.3:a:wire:wire:3.17.2924
Wire » Wire » Version: 3.17.3598

cpe:2.3:a:wire:wire:3.17.3598
Wire » Wire » Version: 3.17.3666

cpe:2.3:a:wire:wire:3.17.3666
Wire » Wire » Version: 3.18.2925

cpe:2.3:a:wire:wire:3.18.2925
Wire » Wire » Version: 3.18.3660

cpe:2.3:a:wire:wire:3.18.3660
Wire » Wire » Version: 3.18.3728

cpe:2.3:a:wire:wire:3.18.3728
Wire » Wire » Version: 3.19.2928

cpe:2.3:a:wire:wire:3.19.2928
Wire » Wire » Version: 3.19.3731

cpe:2.3:a:wire:wire:3.19.3731
Wire » Wire » Version: 3.19.3799

cpe:2.3:a:wire:wire:3.19.3799
Wire » Wire » Version: 3.20.2934

cpe:2.3:a:wire:wire:3.20.2934
Wire » Wire » Version: 3.20.3890

cpe:2.3:a:wire:wire:3.20.3890
Wire » Wire » Version: 3.20.3912

cpe:2.3:a:wire:wire:3.20.3912
Wire » Wire » Version: 3.5.2881

cpe:2.3:a:wire:wire:3.5.2881
Wire » Wire » Version: 3.5.2899

cpe:2.3:a:wire:wire:3.5.2899
Wire » Wire » Version: 3.5.2910

cpe:2.3:a:wire:wire:3.5.2910
Wire » Wire » Version: 3.6.2885

cpe:2.3:a:wire:wire:3.6.2885
Wire » Wire » Version: 3.6.2908

cpe:2.3:a:wire:wire:3.6.2908
Wire » Wire » Version: 3.6.2923

cpe:2.3:a:wire:wire:3.6.2923
Wire » Wire » Version: 3.7.2891

cpe:2.3:a:wire:wire:3.7.2891
Wire » Wire » Version: 3.7.2917

cpe:2.3:a:wire:wire:3.7.2917
Wire » Wire » Version: 3.7.2930

cpe:2.3:a:wire:wire:3.7.2930
Wire » Wire » Version: 3.8.2894

cpe:2.3:a:wire:wire:3.8.2894
Wire » Wire » Version: 3.8.2927

cpe:2.3:a:wire:wire:3.8.2927
Wire » Wire » Version: 3.8.2940

cpe:2.3:a:wire:wire:3.8.2940
Wire » Wire » Version: 3.9.2895

cpe:2.3:a:wire:wire:3.9.2895
Wire » Wire » Version: 3.9.2928

cpe:2.3:a:wire:wire:3.9.2928
Wire » Wire » Version: 3.9.2943

cpe:2.3:a:wire:wire:3.9.2943
Wire » Wire - Audio » Version: Any

cpe:2.3:a:wire:wire_-_audio
Wire » Wire Secure Messenger » Version: Any

cpe:2.3:a:wire:wire_secure_messenger:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-27853

Products

Pricing

Contact Us