5.4

CVE-2020-10942

Exploit
In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.5.8
Opensuse ≫ Leap Version15.1
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version19.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.96% 0.569
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 1 4.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
nvd@nist.gov 5.4 3.4 7.8
AV:L/AC:M/Au:N/C:N/I:P/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
Third Party Advisory
Mailing List
https://www.debian.org/security/2020/dsa-4698
Third Party Advisory
https://usn.ubuntu.com/4342-1/
Third Party Advisory
https://usn.ubuntu.com/4344-1/
Third Party Advisory
https://usn.ubuntu.com/4345-1/
Third Party Advisory
https://usn.ubuntu.com/4364-1/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4667
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/04/15/4
Third Party Advisory
Mailing List
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8
Vendor Advisory
Release Notes
https://git.kernel.org/linus/42d84c8490f9f0931786f1623191fcab397c3d64
Patch
Third Party Advisory
https://lkml.org/lkml/2020/2/15/125
Patch
Vendor Advisory
Exploit
https://security.netapp.com/advisory/ntap-20200403-0003/
Third Party Advisory