High severity7.5NVD Advisory· Published Apr 20, 2020· Updated Jun 17, 2026

CVE-2020-3946

Description

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack (denial-of-service).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Installbuilder
cpe:2.3:a:vmware:installbuilder:*:*:*:*:*:*:*:*
Range: <19.11.0
InstallBuilder/InstallBuilderllm-fuzzy
Range: <19.11
VMware/InstallBuilderv5
Range: All versions prior to version 19.11.0

Patches

Vulnerability mechanics

References

blog.installbuilder.com/2019/12/configure-autoupdate-project-settings.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000