What is CVE-2020-17002?

CVE-2020-17002 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Azure SDK for C Security Feature Bypass Vulnerability

Which CVE IDs does CVE-2020-17002 cover?

CVE-2020-17002 covers the following CVE IDs: CVE-2020-17002. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2020-17002?

CVE-2020-17002 has a CVSS v3 base score of 7.4, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2020-17002?

CVE-2020-17002 affects 18 products, including: Azure-c-shared-utility Release LTS_02_2020_Ref02; Azure-c-shared-utility Release LTS_07_2020_Ref02; C SDK for Azure IoT; C SDK for Azure IoT Release LTS_02_2020_Ref02; C SDK for Azure IoT Release LTS_07_2020_Ref02; and others — see the full list on the advisory page.

CVE-2020-17002HighCVSS 7.4

Azure SDK for C Security Feature Bypass Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

December 8, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-17002 →

🎯 Affected products18

Azure-c-shared-utility Release LTS_02_2020_Ref02
Azure-c-shared-utility Release LTS_07_2020_Ref02
C SDK for Azure IoT
C SDK for Azure IoT Release LTS_02_2020_Ref02
C SDK for Azure IoT Release LTS_07_2020_Ref02
azure-c-shared-utility
azure-uamqp-c
azure-uamqp-c Release LTS_02_2020_Ref02
azure-uamqp-c Release LTS_07_2020_Ref02
azure-uhttp-c
azure-uhttp-c Release LTS_02_2020_Ref02
azure-uhttp-c Release LTS_07_2020_Ref02
azure-umqtt-c
azure-umqtt-c Release LTS_02_2020_Ref02
azure-umqtt-c Release LTS_07_2020_Ref02
azure-utpm-c
azure-utpm-c Release LTS_02_2020_Ref02
azure-utpm-c Release LTS_07_2020_Ref02

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (18)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17002
patchhttps://github.com/Azure/azure-c-shared-utility/releases/tag/2020-12-09
patchhttps://github.com/Azure/azure-c-shared-utility/releases/tag/LTS_07_2020_Ref02
patchhttps://github.com/Azure/azure-c-shared-utility/releases/tag/LTS_02_2020_Ref02
patchhttps://github.com/Azure/azure-uamqp-c/releases/tag/2020-12-09
patchhttps://github.com/Azure/azure-umqtt-c/releases/tag/2020-12-09
patchhttps://github.com/Azure/azure-uhttp-c/releases/tag/2020-12-09
patchhttps://github.com/Azure/azure-utpm-c/releases/tag/2020-12-09
patchhttps://github.com/Azure/azure-uamqp-c/releases/tag/LTS_07_2020_Ref02
patchhttps://github.com/Azure/azure-umqtt-c/releases/tag/LTS_07_2020_Ref02
patchhttps://github.com/Azure/azure-utpm-c/releases/tag/LTS_07_2020_Ref02
patchhttps://github.com/Azure/azure-uamqp-c/releases/tag/LTS_02_2020_Ref02
patchhttps://github.com/Azure/azure-umqtt-c/releases/tag/LTS_02_2020_Ref02
patchhttps://github.com/Azure/azure-uhttp-c/releases/tag/LTS_02_2020_Ref02
patchhttps://github.com/Azure/azure-utpm-c/releases/tag/LTS_02_2020_Ref02
patchhttps://github.com/Azure/azure-iot-sdk-c/releases/tag/LTS_07_2020_Ref02
patchhttps://github.com/Azure/azure-iot-sdk-c/releases/tag/LTS_02_2020_Ref02
patchhttps://github.com/Azure/azure-iot-sdk-c/releases/tag/2020-12-09