5.5

CVE-2020-8832

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Netapp ≫ Cloud Backup Version-
Netapp ≫ Aff 8300 Firmware Version-
   Netapp ≫ Aff 8300 Version-
Netapp ≫ Aff 8700 Firmware Version-
   Netapp ≫ Aff 8700 Version-
Netapp ≫ Aff A220 Firmware Version-
   Netapp ≫ Aff A220 Version-
Netapp ≫ Aff A320 Firmware Version-
   Netapp ≫ Aff A320 Version-
Netapp ≫ Aff A400 Firmware Version-
   Netapp ≫ Aff A400 Version-
Netapp ≫ Aff A700s Firmware Version-
   Netapp ≫ Aff A700s Version-
Netapp ≫ Aff C190 Firmware Version-
   Netapp ≫ Aff C190 Version-
Netapp ≫ H300e Firmware Version-
   Netapp ≫ H300e Version-
Netapp ≫ H300s Firmware Version-
   Netapp ≫ H300s Version-
Netapp ≫ H410c Firmware Version-
   Netapp ≫ H410c Version-
Netapp ≫ H410s Firmware Version-
   Netapp ≫ H410s Version-
Netapp ≫ H500e Firmware Version-
   Netapp ≫ H500e Version-
Netapp ≫ H500s Firmware Version-
   Netapp ≫ H500s Version-
Netapp ≫ H610c Firmware Version-
   Netapp ≫ H610c Version-
Netapp ≫ H610s Firmware Version-
   Netapp ≫ H610s Version-
Netapp ≫ H615c Firmware Version-
   Netapp ≫ H615c Version-
Netapp ≫ H700e Firmware Version-
   Netapp ≫ H700e Version-
Netapp ≫ H700s Firmware Version-
   Netapp ≫ H700s Version-
Netapp ≫ Fas2720 Firmware Version-
   Netapp ≫ Fas2720 Version-
Netapp ≫ Fas2750 Firmware Version-
   Netapp ≫ Fas2750 Version-
Netapp ≫ Fas8300 Firmware Version-
   Netapp ≫ Fas8300 Version-
Netapp ≫ Fas8700 Firmware Version-
   Netapp ≫ Fas8700 Version-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.683
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
security@ubuntu.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.