4.5
CVE-2020-35508
- EPSS 0.05%
- Published 26.03.2021 17:15:12
- Last modified 21.11.2024 05:27:27
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.
Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.12
Linux ≫ Linux Kernel Version5.12 Update-
Linux ≫ Linux Kernel Version5.12 Updaterc1
Linux ≫ Linux Kernel Version5.12 Updaterc2
Linux ≫ Linux Kernel Version5.12 Updaterc3
Linux ≫ Linux Kernel Version5.12 Updaterc4
Redhat ≫ Enterprise Linux Version8.0
Netapp ≫ A700s Firmware Version-
Netapp ≫ Brocade Fabric Operating System Firmware Version-
Netapp ≫ Fas8300 Firmware Version-
Netapp ≫ Fas8700 Firmware Version-
Netapp ≫ Aff A400 Firmware Version-
Netapp ≫ H300s Firmware Version-
Netapp ≫ H500s Firmware Version-
Netapp ≫ H700s Firmware Version-
Netapp ≫ H300e Firmware Version-
Netapp ≫ H500e Firmware Version-
Netapp ≫ H700e Firmware Version-
Netapp ≫ H410s Firmware Version-
Netapp ≫ H410c Firmware Version-
Netapp ≫ H610c Firmware Version-
Netapp ≫ H610s Firmware Version-
Netapp ≫ H615c Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.161 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.5 | 1 | 3.4 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
|
| nvd@nist.gov | 4.4 | 3.4 | 6.4 |
AV:L/AC:M/Au:N/C:P/I:P/A:P
|
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
CWE-665 Improper Initialization
The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.