5.5
CVE-2019-20054
- EPSS 0.48%
- Veröffentlicht 28.12.2019 05:15:11
- Zuletzt bearbeitet 21.11.2024 04:37:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.0.6
Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere
Netapp ≫ Cloud Backup Version-
Netapp ≫ Data Availability Services Version-
Netapp ≫ E-series Santricity Os Controller Version >= 11.0 <= 11.70.2
Netapp ≫ Fas/aff Baseboard Management Controller Version-
Netapp ≫ Solidfire & Hci Management Node Version-
Netapp ≫ Steelstore Cloud Integrated Storage Version-
Netapp ≫ Solidfire Baseboard Management Controller Version-
Netapp ≫ H610s Firmware Version-
Netapp ≫ 8300 Firmware Version-
Netapp ≫ 8700 Firmware Version-
Netapp ≫ A400 Firmware Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.48% | 0.374 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:C
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
https://security.netapp.com/advisory/ntap-20200204-0002/
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=23da9588037ecdd4901db76a5b79a42b529c4ec3
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89189557b47b35683a27c80ee78aef18248eefb4