4.4

CVE-2020-10732

A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.16.85
Linux ≫ Linux Kernel Version >= 4.4 < 4.4.226
Linux ≫ Linux Kernel Version >= 4.9 < 4.9.226
Linux ≫ Linux Kernel Version >= 4.14 < 4.14.183
Linux ≫ Linux Kernel Version >= 4.19 < 4.19.126
Linux ≫ Linux Kernel Version >= 5.4 < 5.4.44
Linux ≫ Linux Kernel Version >= 5.6 < 5.6.16
Opensuse ≫ Leap Version 15.1
Opensuse ≫ Leap Version 15.2
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 20.04 SwEdition lts
Netapp ≫ Active Iq Unified Manager SwPlatform vmware_vsphere Version >= 9.5
Netapp ≫ Hci Management Node Version -
Netapp ≫ Solidfire Version -
Netapp ≫ Aff A700 Firmware Version -
   Netapp ≫ Aff A700 Version -
Netapp ≫ H410c Firmware Version -
   Netapp ≫ H410c Version -
Netapp ≫ H300s Firmware Version -
   Netapp ≫ H300s Version -
Netapp ≫ H500s Firmware Version -
   Netapp ≫ H500s Version -
Netapp ≫ H700s Firmware Version -
   Netapp ≫ H700s Version -
Netapp ≫ H300e Firmware Version -
   Netapp ≫ H300e Version -
Netapp ≫ H500e Firmware Version -
   Netapp ≫ H500e Version -
Netapp ≫ H700e Firmware Version -
   Netapp ≫ H700e Version -
Netapp ≫ H410s Firmware Version -
   Netapp ≫ H410s Version -
Netapp ≫ Aff 8300 Firmware Version -
   Netapp ≫ Aff 8300 Version -
Netapp ≫ Aff 8700 Firmware Version -
   Netapp ≫ Aff 8700 Version -
Netapp ≫ Aff A400 Firmware Version -
   Netapp ≫ Aff A400 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.62% 0.448
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.4 1.8 2.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
NIST 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:P/I:N/A:P
RedHat 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/4485-1/
Third Party Advisory
https://usn.ubuntu.com/4427-1/
Third Party Advisory
https://usn.ubuntu.com/4439-1/
Third Party Advisory
https://usn.ubuntu.com/4440-1/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/4411-1/
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10732
Patch
Third Party Advisory
Issue Tracking
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=aca969cacf07f41070d788ce2b8ca71f09d5207d
Patch
Vendor Advisory
https://github.com/google/kmsan/issues/76
Third Party Advisory
Issue Tracking
https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a
Patch
Third Party Advisory
https://lore.kernel.org/lkml/CAG_fn=VZZ7yUxtOGzuTLkr7wmfXWtKK9BHHYawj=rt9XWnCYvg%40mail.gmail.com/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210129-0005/
Third Party Advisory
https://twitter.com/grsecurity/status/1252558055629299712
Third Party Advisory