5.5
CVE-2020-8832
- EPSS 0.45%
- Veröffentlicht 10.04.2020 00:15:11
- Zuletzt bearbeitet 21.11.2024 05:39:31
- Erkennungen
Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615
The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Netapp ≫ Cloud Backup Version -
Netapp ≫ Solidfire & Hci Management Node Version -
Netapp ≫ Steelstore Cloud Integrated Storage Version -
Netapp ≫ Aff 8300 Firmware Version -
Netapp ≫ Aff 8700 Firmware Version -
Netapp ≫ Aff A220 Firmware Version -
Netapp ≫ Aff A320 Firmware Version -
Netapp ≫ Aff A400 Firmware Version -
Netapp ≫ Aff A700s Firmware Version -
Netapp ≫ Aff C190 Firmware Version -
Netapp ≫ H300e Firmware Version -
Netapp ≫ H300s Firmware Version -
Netapp ≫ H410c Firmware Version -
Netapp ≫ H410s Firmware Version -
Netapp ≫ H500e Firmware Version -
Netapp ≫ H500s Firmware Version -
Netapp ≫ H610c Firmware Version -
Netapp ≫ H610s Firmware Version -
Netapp ≫ H615c Firmware Version -
Netapp ≫ H700e Firmware Version -
Netapp ≫ H700s Firmware Version -
Netapp ≫ Fas2720 Firmware Version -
Netapp ≫ Fas2750 Firmware Version -
Netapp ≫ Fas8300 Firmware Version -
Netapp ≫ Fas8700 Firmware Version -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.45% | 0.358 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
| Canonical | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
https://security.netapp.com/advisory/ntap-20200430-0004/
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840
https://usn.ubuntu.com/usn/usn-4302-1