4.5
CVE-2020-35508
- EPSS 0.23%
- Veröffentlicht 26.03.2021 17:15:12
- Zuletzt bearbeitet 21.11.2024 05:27:27
- Erkennungen
A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.12
Linux ≫ Linux Kernel Version 5.12 Update -
Linux ≫ Linux Kernel Version 5.12 Update rc1
Linux ≫ Linux Kernel Version 5.12 Update rc2
Linux ≫ Linux Kernel Version 5.12 Update rc3
Linux ≫ Linux Kernel Version 5.12 Update rc4
Redhat ≫ Enterprise Linux Version 8.0
Netapp ≫ A700s Firmware Version -
Netapp ≫ Brocade Fabric Operating System Firmware Version -
Netapp ≫ Fas8300 Firmware Version -
Netapp ≫ Fas8700 Firmware Version -
Netapp ≫ Aff A400 Firmware Version -
Netapp ≫ H300s Firmware Version -
Netapp ≫ H500s Firmware Version -
Netapp ≫ H700s Firmware Version -
Netapp ≫ H300e Firmware Version -
Netapp ≫ H500e Firmware Version -
Netapp ≫ H700e Firmware Version -
Netapp ≫ H410s Firmware Version -
Netapp ≫ H410c Firmware Version -
Netapp ≫ H610c Firmware Version -
Netapp ≫ H610s Firmware Version -
Netapp ≫ H615c Firmware Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.13 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.5 | 1 | 3.4 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
|
| NIST | 4.4 | 3.4 | 6.4 |
AV:L/AC:M/Au:N/C:P/I:P/A:P
|
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
CWE-665 Improper Initialization
The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.
https://bugzilla.redhat.com/show_bug.cgi?id=1902724
https://github.com/torvalds/linux/commit/b4e00444cab4c3f3fec876dc0cccc8cbb0d1a948
https://security.netapp.com/advisory/ntap-20210513-0006/