7.2

CVE-2020-15780

An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.7.7
Opensuse ≫ Leap Version15.1
Opensuse ≫ Leap Version15.2
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version20.04 SwEditionlts
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.67
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://usn.ubuntu.com/4439-1/
Third Party Advisory
https://usn.ubuntu.com/4425-1/
Third Party Advisory
https://usn.ubuntu.com/4440-1/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/4426-1/
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/07/29/3
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2020/07/30/2
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2020/07/30/3
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2020/07/20/7
Patch
Third Party Advisory
Mailing List
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.7
Vendor Advisory
Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=75b0cea7bf307f362057cc778efe89af4c615354
Patch
Vendor Advisory
https://git.zx2c4.com/american-unsigned-language/tree/american-unsigned-language-2.sh
Patch
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/06/15/3
Third Party Advisory
Mailing List