CVE-2020-10690

EPSS 0.36%
Veröffentlicht 08.05.2020 15:15:11
Zuletzt bearbeitet 21.11.2024 04:55:51
Erkennungen
Login

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 9

NVD 24 VulnDex Vulnerability Enrichment 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 5.5

Redhat ≫ Enterprise Linux Version 7.0

Redhat ≫ Enterprise Linux Version 8.0

Debian ≫ Debian Linux Version 8.0

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm

Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm

Opensuse ≫ Leap Version 15.1

Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere

Netapp ≫ Element Software Version -

Netapp ≫ Hci Management Node Version -

Netapp ≫ Solidfire Version -

Netapp ≫ Steelstore Cloud Integrated Storage Version -

Netapp ≫ Hci Compute Node Version -

Netapp ≫ H300s Firmware Version -

Netapp ≫ H300s Version -

Netapp ≫ H500s Firmware Version -

Netapp ≫ H500s Version -

Netapp ≫ H700s Firmware Version -

Netapp ≫ H700s Version -

Netapp ≫ H300e Firmware Version -

Netapp ≫ H300e Version -

Netapp ≫ H500e Firmware Version -

Netapp ≫ H500e Version -

Netapp ≫ H700e Firmware Version -

Netapp ≫ H700e Version -

Netapp ≫ H410s Firmware Version -

Netapp ≫ H410s Version -

Netapp ≫ H410c Firmware Version -

Netapp ≫ H410c Version -

Netapp ≫ H610c Firmware Version -

Netapp ≫ H610c Version -

Netapp ≫ H610s Firmware Version -

Netapp ≫ H610s Version -

Netapp ≫ H615c Firmware Version -

Netapp ≫ H615c Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.36%	0.275

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.4	0.5	5.9	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P
RedHat	6.5	0.6	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html

Third Party Advisory

Mailing List

https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html

Third Party Advisory

Mailing List

https://security.netapp.com/advisory/ntap-20200608-0001/

Third Party Advisory

https://usn.ubuntu.com/4419-1/

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10690

Patch

Third Party Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2020-10690

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-10690

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-10690

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-10690