5.5
CVE-2020-8832
- EPSS 0.59%
- Published 10.04.2020 00:15:11
- Last modified 21.11.2024 05:39:31
- Source security@ubuntu.com
- Teams watchlist Login
- Open Login
The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.
Data is provided by the National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Netapp ≫ Cloud Backup Version-
Netapp ≫ Solidfire & Hci Management Node Version-
Netapp ≫ Steelstore Cloud Integrated Storage Version-
Netapp ≫ Aff 8300 Firmware Version-
Netapp ≫ Aff 8700 Firmware Version-
Netapp ≫ Aff A220 Firmware Version-
Netapp ≫ Aff A320 Firmware Version-
Netapp ≫ Aff A400 Firmware Version-
Netapp ≫ Aff A700s Firmware Version-
Netapp ≫ Aff C190 Firmware Version-
Netapp ≫ H300e Firmware Version-
Netapp ≫ H300s Firmware Version-
Netapp ≫ H410c Firmware Version-
Netapp ≫ H410s Firmware Version-
Netapp ≫ H500e Firmware Version-
Netapp ≫ H500s Firmware Version-
Netapp ≫ H610c Firmware Version-
Netapp ≫ H610s Firmware Version-
Netapp ≫ H615c Firmware Version-
Netapp ≫ H700e Firmware Version-
Netapp ≫ H700s Firmware Version-
Netapp ≫ Fas2720 Firmware Version-
Netapp ≫ Fas2750 Firmware Version-
Netapp ≫ Fas8300 Firmware Version-
Netapp ≫ Fas8700 Firmware Version-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.59% | 0.683 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
security@ubuntu.com | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.