MEDIUM
ant: insecure temporary file vulnerability
Published May 14, 2020
6.3
MEDIUMCVSS 3.1
EPSS 1.77%
Description
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
Affected products
- Vendor n/a Product Apache Ant Defaultn/a
- Version Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Apache Ant | n/a |
|
Configuration 1
Configuration 2
- 19.10
Configuration 3
OR
- 31
- 32
Configuration 5
OR
- 6.2.1.0
- ≥ 2.7.0 · ≤ 2.9.0
- ≥ 14.0.0 · ≤ 14.4.0
- ≥ 2.4.0 · ≤ 2.9.0
- 12.2.1.3.0
- 12.2.1.4.0
- 15.0.3
- 7.3
- ≥ 8.0.0 · ≤ 8.2.2
- 6.3.0
- 7.3
- 7.4
- 12.2.1.3.0
- 12.2.1.4.0
- 3.2.0
- 12.4.0.0
- 11.1.1.7.0
- ≥ 8.0.6 · ≤ 8.1.0
- 12.1.0
- 12.3.0
- 12.4.0
- 14.0.0
- 14.1.0
- 12.0.0
- 12.1.0
- ≥ 3.0 · ≤ 3.0.2
- ≥ 16.2.0 · ≤ 16.2.11
- ≥ 17.12.0 · ≤ 17.12.7
- ≥ 17.7 · ≤ 17.12
- 16.1
- 16.2
- 18.8
- 19.12
- 12.1
- 12.2
- 3.2.1.0
- 14.1
- 15.0
- 16.0
- 15.0.3
- 16.0.3
- 14.0
- 14.1
- 15.0
- 16.0
- 16.0.3.0
- 19.0.1
- 14.0
- 14.1
- 1.9
- 1.10
- 13.2.5
- 13.2.8
- 14.1.3.2
- 15.0
- 15.0.4.0
- 16.0
- 16.0.3.0
- 14.1
- 14.1.3.2
- 15.0
- 15.0.4.0
- 16.0
- 16.0.3.0
- 19.0.1.0
- 15.0.3
- 15.0.3
- 15.0.3
- 19.0.1
- 14.0
- 14.1
- 15.0
- 16.0
- 14.0.3
- 14.1.3
- 15.0.3
- 16.0.3
- 16.0.3.0
- 15.0.3
- 16.0.3
- 15.0.3
- 14.0
- 14.1
- 14.1.3.2
- 15.0
- 15.0.4.0
- 16.0
- 16.0.3.0
- 19.0.1.0
- 15.0.3
- 16.0.3
- 14.0.4
- 14.1
- 14.1.3
- 15.0
- 15.0.3
- 16.0
- 16.0.3
- 15.0.4
- 16.0.6
- 17.0.4
- 18.0.3
- 19.0.2
- < 11.2.2.8.27
- 11.2.2.8.49
- ≥ 4.3.0.1.0 · ≤ 4.3.0.6.0
- 2.2.0.0.0
- 4.2.0.2.0
- 4.2.0.3.0
- 4.4.0.0.0
- 4.4.0.2.0
No data.
RHDM 7.9.0
ant
Fixed · RHSA-2020:4960
RHPAM 7.9.0
ant
Fixed · RHSA-2020:4961
Red Hat AMQ Streams 1.5.0
ant
Fixed · RHSA-2020:2618
Red Hat OpenShift Container Platform 3.11
jenkins-0:2.263.3.1612433584-1.el7
Fixed · RHSA-2021:0637
Red Hat OpenShift Container Platform 4.5
conmon-2:2.0.21-1.rhaos4.5.el7
Fixed · RHSA-2021:0429
Red Hat OpenShift Container Platform 4.5
jenkins-0:2.263.3.1612434332-1.el7
Fixed · RHSA-2021:0429
Red Hat OpenShift Container Platform 4.5
machine-config-daemon-0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8
Fixed · RHSA-2021:0429
Red Hat OpenShift Container Platform 4.5
openshift-0:4.5.0-202102050524.p0.git.0.9229406.el7
Fixed · RHSA-2021:0429
Red Hat OpenShift Container Platform 4.5
openshift-ansible-0:4.5.0-202102031005.p0.git.0.c6839a2.el7
Fixed · RHSA-2021:0429
Red Hat OpenShift Container Platform 4.5
openshift-clients-0:4.5.0-202102051529.p0.git.3612.61b096a.el7
Fixed · RHSA-2021:0429
Red Hat OpenShift Container Platform 4.5
runc-0:1.0.0-72.rhaos4.5.giteadfc6b.el8
Fixed · RHSA-2021:0429
Red Hat OpenShift Container Platform 4.6
jenkins-0:2.263.3.1612434510-1.el8
Fixed · RHSA-2021:0423
Red Hat BPM Suite 6
ant
Out of support scope
Red Hat Enterprise Linux 5
ant
Out of support scope
Red Hat Enterprise Linux 6
ant
Out of support scope
Red Hat Enterprise Linux 7
ant
Will not fix
Red Hat Enterprise Linux 8
ant
Will not fix
Red Hat Enterprise Linux 8
ant:1.10/ant
Will not fix
Red Hat JBoss BRMS 5
ant
Out of support scope
Red Hat JBoss Data Virtualization 6
ant
Out of support scope
Red Hat JBoss Enterprise Application Platform 5
ant
Out of support scope
Red Hat JBoss Enterprise Application Platform 6
ant
Not affected
Red Hat JBoss Fuse Service Works 6
ant
Out of support scope
Red Hat JBoss Operations Network 3
ant
Out of support scope
Red Hat OpenShift Container Platform 3.11
jenkins-2-plugins
Not affected
Red Hat OpenShift Container Platform 4
jenkins-2-plugins
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-metering-hive
Will not fix
Red Hat Single Sign-On 7
rh-sso7-keycloak
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| RHDM 7.9.0 | ant | Fixed | RHSA-2020:4960 |
| RHPAM 7.9.0 | ant | Fixed | RHSA-2020:4961 |
| Red Hat AMQ Streams 1.5.0 | ant | Fixed | RHSA-2020:2618 |
| Red Hat OpenShift Container Platform 3.11 | jenkins-0:2.263.3.1612433584-1.el7 | Fixed | RHSA-2021:0637 |
| Red Hat OpenShift Container Platform 4.5 | conmon-2:2.0.21-1.rhaos4.5.el7 | Fixed | RHSA-2021:0429 |
| Red Hat OpenShift Container Platform 4.5 | jenkins-0:2.263.3.1612434332-1.el7 | Fixed | RHSA-2021:0429 |
| Red Hat OpenShift Container Platform 4.5 | machine-config-daemon-0:4.5.0-202102050524.p0.git.2594.ff3b8c0.el8 | Fixed | RHSA-2021:0429 |
| Red Hat OpenShift Container Platform 4.5 | openshift-0:4.5.0-202102050524.p0.git.0.9229406.el7 | Fixed | RHSA-2021:0429 |
| Red Hat OpenShift Container Platform 4.5 | openshift-ansible-0:4.5.0-202102031005.p0.git.0.c6839a2.el7 | Fixed | RHSA-2021:0429 |
| Red Hat OpenShift Container Platform 4.5 | openshift-clients-0:4.5.0-202102051529.p0.git.3612.61b096a.el7 | Fixed | RHSA-2021:0429 |
| Red Hat OpenShift Container Platform 4.5 | runc-0:1.0.0-72.rhaos4.5.giteadfc6b.el8 | Fixed | RHSA-2021:0429 |
| Red Hat OpenShift Container Platform 4.6 | jenkins-0:2.263.3.1612434510-1.el8 | Fixed | RHSA-2021:0423 |
| Red Hat BPM Suite 6 | ant | Out of support scope | n/a |
| Red Hat Enterprise Linux 5 | ant | Out of support scope | n/a |
| Red Hat Enterprise Linux 6 | ant | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | ant | Will not fix | n/a |
| Red Hat Enterprise Linux 8 | ant | Will not fix | n/a |
| Red Hat Enterprise Linux 8 | ant:1.10/ant | Will not fix | n/a |
| Red Hat JBoss BRMS 5 | ant | Out of support scope | n/a |
| Red Hat JBoss Data Virtualization 6 | ant | Out of support scope | n/a |
| Red Hat JBoss Enterprise Application Platform 5 | ant | Out of support scope | n/a |
| Red Hat JBoss Enterprise Application Platform 6 | ant | Not affected | n/a |
| Red Hat JBoss Fuse Service Works 6 | ant | Out of support scope | n/a |
| Red Hat JBoss Operations Network 3 | ant | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | jenkins-2-plugins | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | jenkins-2-plugins | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-hive | Will not fix | n/a |
| Red Hat Single Sign-On 7 | rh-sso7-keycloak | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
In OpenShift Container Platform (OCP), the Hive/Presto/Hadoop components that comprise the OCP Metering stack, ship the vulnerable version of ant package. Since the release of OCP 4.6, the Metering product has been deprecated [1], hence the affected components are marked as wontfix. This may be fixed in the future. [1] https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html#ocp-4-6-metering-operator-deprecated
Red Hat mitigation
For versions 1.1 to 1.9.14 and 1.10.0 to 1.10.7, set the java.io.tmpdir system property to a private directory-- only readable and writable by the current user-- before running Ant. For versions 1.9.15 and 1.10.8, use the Ant property ant.tmpfile instead. Ant 1.10.8 protects the temporary files if the underlying filesystem allows it, but using a private temporary directory is still recommended.
Metrics
No CVSS v4.0 score for this CVE.
6.3 MEDIUM NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Impact High
Integrity Impact High
Availability Impact None
No CVSS v3.0 score for this CVE.
3.3 LOW NVD
AV:L/AC:M/Au:N/C:P/I:P/A:N
Access Vector Local
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact None
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
1.77% 0.01769
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.01769
Score over time
2021–2026- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (18 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 1.77% (0.01769) | 77.31th | v5 (v2026.06.15) |
| Jun 15, 2026 | 1.85% (0.01854) | 76.33th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.02% (0.00021) | 3.11th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.08% (0.00076) | 34.80th | v3 (v2023.03.01) |
| Nov 8, 2023 | 0.08% (0.00076) | 31.71th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.06% (0.00062) | 24.39th | v3 (v2023.03.01) |
| Mar 6, 2023 | 3.05% (0.03052) | 83.71th | v2 (v2022.01.01) |
| Apr 1, 2022 | 3.05% (0.03052) | 82.04th | v2 (v2022.01.01) |
| Feb 4, 2022 | 30.38% (0.30384) | 96.32th | v2 (v2022.01.01) |
| Feb 3, 2022 | 60.01% (0.60011) | 99.30th | v1 |
| Jan 6, 2022 | 60.01% (0.60011) | 99.28th | v1 |
| Oct 21, 2021 | 25.06% (0.25064) | 98.23th | v1 |
| Sep 1, 2021 | 24.70% (0.24698) | 98.23th | v1 |
| Jul 21, 2021 | 24.70% (0.24698) | 0.00th | v1 |
| Jun 22, 2021 | 24.33% (0.24329) | 0.00th | v1 |
| Jun 15, 2021 | 23.96% (0.23957) | 0.00th | v1 |
| Apr 20, 2021 | 23.58% (0.23580) | 0.00th | v1 |
| Apr 14, 2021 | 23.20% (0.23200) | 0.00th | v1 |
Weaknesses (3)
References (96)
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00053.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/09/30/6 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/12/06/1 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2020-1945 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1837444 Issue Tracking
- https://github.com/advisories/GHSA-4p6w-m9wc-c9c9 Advisory
- https://lists.apache.org/thread.html/r0d08a96ba9de8aa435f32944e8b2867c368a518d4ff57782e3637335%40%3Cissues.hive.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r0d08a96ba9de8aa435f32944e8b2867c368a518d4ff57782e3637335@%3Cissues.hive.apache.org%3E
- https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r1863b9ce4c3e4b1e5b0c671ad05545ba3eb8399616aa746af5dfe1b1%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r1863b9ce4c3e4b1e5b0c671ad05545ba3eb8399616aa746af5dfe1b1@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r1a9c992d7c8219dc15b4ad448649f0ffdaa88d76ef6a0035c49455f5%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r1a9c992d7c8219dc15b4ad448649f0ffdaa88d76ef6a0035c49455f5@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r1b32c76afffcf676e13ed635a3332f3e46e6aaa7722eb3fc7a28f58e%40%3Cdev.hive.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r1b32c76afffcf676e13ed635a3332f3e46e6aaa7722eb3fc7a28f58e@%3Cdev.hive.apache.org%3E
- https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r2704fb14ce068c64759a986f81d5b5e42ab434fa13d0f444ad52816b%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r2704fb14ce068c64759a986f81d5b5e42ab434fa13d0f444ad52816b@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r3cea0f3da4f6d06d7afb6c0804da8e01773a0f50a09b8d9beb2cda65%40%3Cissues.hive.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r3cea0f3da4f6d06d7afb6c0804da8e01773a0f50a09b8d9beb2cda65@%3Cissues.hive.apache.org%3E
- https://lists.apache.org/thread.html/r4b2904d64affd4266cd72ccb2fc3927c1c2f22009f183095aa46bf90%40%3Cissues.hive.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r4b2904d64affd4266cd72ccb2fc3927c1c2f22009f183095aa46bf90@%3Cissues.hive.apache.org%3E
- https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r5dfc77048b1f9db26622dce91a6edf083d499397256594952fad5f35%40%3Ccommits.myfaces.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r5dfc77048b1f9db26622dce91a6edf083d499397256594952fad5f35@%3Ccommits.myfaces.apache.org%3E
- https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/r6030d34ceacd0098538425c5dac8251ffc7fd90b886942bc7ef87858%40%3Cnotifications.groovy.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r6030d34ceacd0098538425c5dac8251ffc7fd90b886942bc7ef87858@%3Cnotifications.groovy.apache.org%3E
- https://lists.apache.org/thread.html/r6970d196cd73863dafdbc3a7052562deedd338e3bd7d73d8171d92d6%40%3Ccommits.groovy.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r6970d196cd73863dafdbc3a7052562deedd338e3bd7d73d8171d92d6@%3Ccommits.groovy.apache.org%3E
- https://lists.apache.org/thread.html/r6e295d792032ec02b32be3846c21a58857fba4a077d22c5842d69ba2%40%3Ctorque-dev.db.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r6e295d792032ec02b32be3846c21a58857fba4a077d22c5842d69ba2@%3Ctorque-dev.db.apache.org%3E
- https://lists.apache.org/thread.html/r6edd3e2cb79ee635630d891b54a4f1a9cd8c7f639d6ee34e75fbe830%40%3Cissues.hive.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r6edd3e2cb79ee635630d891b54a4f1a9cd8c7f639d6ee34e75fbe830@%3Cissues.hive.apache.org%3E
- https://lists.apache.org/thread.html/r815f88d1044760176f30a4913b4baacd06f3eae4eb662de7388e46d8%40%3Cissues.hive.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r815f88d1044760176f30a4913b4baacd06f3eae4eb662de7388e46d8@%3Cissues.hive.apache.org%3E
- https://lists.apache.org/thread.html/r8e24abb7dd77cda14c6df90a377c94f0a413bbfcec90a29540ff8adf%40%3Cissues.hive.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r8e24abb7dd77cda14c6df90a377c94f0a413bbfcec90a29540ff8adf@%3Cissues.hive.apache.org%3E
- https://lists.apache.org/thread.html/r8e592bbfc016a5dbe2a8c0e81ff99682b9c78c453621b82c14e7b75e%40%3Cdev.ant.apache.org%3E x_refsource_MISCMailing ListVendor Advisory
- https://lists.apache.org/thread.html/r95dc943e47a211d29df605e14f86c280fc9fa8d828b2b53bd07673c9%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r95dc943e47a211d29df605e14f86c280fc9fa8d828b2b53bd07673c9@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cannounce.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cdev.groovy.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967%40%3Cusers.groovy.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cannounce.apache.org%3E
- https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cdev.groovy.apache.org%3E
- https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cusers.groovy.apache.org%3E
- https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465%40%3Cnotifications.groovy.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465@%3Cnotifications.groovy.apache.org%3E
- https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rb860063819b9c0990e1fbce29d83f4554766fe5a05e3b3939736bf2b%40%3Ccommits.myfaces.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rb860063819b9c0990e1fbce29d83f4554766fe5a05e3b3939736bf2b@%3Ccommits.myfaces.apache.org%3E
- https://lists.apache.org/thread.html/rb8ec556f176c83547b959150e2108e2ddf1d61224295941908b0a81f%40%3Cannounce.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rb8ec556f176c83547b959150e2108e2ddf1d61224295941908b0a81f@%3Cannounce.apache.org%3E
- https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea%40%3Cdev.ant.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea@%3Cdev.ant.apache.org%3E
- https://lists.apache.org/thread.html/rc89e491b5b270fb40f1210b70554527b737c217ad2e831b643ead6bc%40%3Cuser.ant.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rc89e491b5b270fb40f1210b70554527b737c217ad2e831b643ead6bc@%3Cuser.ant.apache.org%3E
- https://lists.apache.org/thread.html/rce099751721c26a8166d8b6578293820832831a0b2cb8d93b8efa081%40%3Cnotifications.groovy.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rce099751721c26a8166d8b6578293820832831a0b2cb8d93b8efa081@%3Cnotifications.groovy.apache.org%3E
- https://lists.apache.org/thread.html/rd7dda48ff835f4d0293949837d55541bfde3683bd35bd8431e324538%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rd7dda48ff835f4d0293949837d55541bfde3683bd35bd8431e324538@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rda80ac59119558eaec452e58ddfac2ccc9211da1c65f7927682c78b1%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rda80ac59119558eaec452e58ddfac2ccc9211da1c65f7927682c78b1@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rdaa9c51d5dc6560c9d2b3f3d742c768ad0705e154041e574a0fae45c%40%3Cnotifications.groovy.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rdaa9c51d5dc6560c9d2b3f3d742c768ad0705e154041e574a0fae45c@%3Cnotifications.groovy.apache.org%3E
- https://lists.apache.org/thread.html/re1ce84518d773a94a613d988771daf9252c9cf7375a9a477009f9735%40%3Ccommits.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/re1ce84518d773a94a613d988771daf9252c9cf7375a9a477009f9735@%3Ccommits.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rf07feaf78afc8f701e21948a06ef92565d3dff1242d710f4fbf900b2%40%3Cdev.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rf07feaf78afc8f701e21948a06ef92565d3dff1242d710f4fbf900b2@%3Cdev.creadur.apache.org%3E
- https://lists.apache.org/thread.html/rfd346609527a79662c48b1da3ac500ec30f29f7ddaa3575051e81890%40%3Ccommits.creadur.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/rfd346609527a79662c48b1da3ac500ec30f29f7ddaa3575051e81890@%3Ccommits.creadur.apache.org%3E
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI/
- https://nvd.nist.gov/vuln/detail/CVE-2020-1945
- https://security.gentoo.org/glsa/202007-34 vendor-advisoryx_refsource_GENTOOThird Party Advisory
- https://usn.ubuntu.com/4380-1/ vendor-advisoryx_refsource_UBUNTUMailing ListVendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2020-1945
- https://www.oracle.com//security-alerts/cpujul2021.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujan2021.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujan2022.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujul2020.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html x_refsource_MISCPatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html x_refsource_MISCPatchThird Party Advisory
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apache
Published May 14, 2020
Updated Aug 4, 2024
Reserved Dec 2, 2019
Link CVE-2020-1945
CISA Vulnrichment
GHSA-4P6W-M9WC-C9C9 Updated n/a