Lucene search

[email protected]NVD:CVE-2020-15436

HistoryNov 23, 2020 - 9:15 p.m.

CVE-2020-15436

2020-11-2321:15:11

CWE-416

[email protected]

web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

Affected configurations

NVD

Node

linuxlinux_kernelRange2.6.38–4.4.229

linuxlinux_kernelRange4.5–4.9.229

linuxlinux_kernelRange4.10–4.14.186

linuxlinux_kernelRange4.15–4.19.130

linuxlinux_kernelRange4.20–5.4.49

linuxlinux_kernelRange5.5–5.7.6

Node

broadcombrocade_fabric_operating_system_firmwareMatch-

Node

netappcloud_backupMatch-

netappsolidfire_\&_hci_management_nodeMatch-

Node

netappsolidfire_baseboard_management_controller_firmwareMatch-

AND

netappsolidfire_baseboard_management_controllerMatch-

Node

netapph410c_firmwareMatch-

AND

netapph410cMatch-

Node

netapph610c_firmwareMatch-

AND

netapph610cMatch-

Node

netapph610s_firmwareMatch-

AND

netapph610sMatch-

Node

netapph615c_firmwareMatch-

AND

netapph615cMatch-

Node

netappa700s_firmwareMatch-

AND

netappa700sMatch-

Node

netappaff_8700_firmwareMatch-

AND

netappaff_8700Match-

Node

netappfas_8700_firmwareMatch-

AND

netappfas_8700Match-

Node

netappaff_8300_firmwareMatch-

AND

netappaff_8300Match-

Node

netappfas_8300_firmwareMatch-

AND

netappfas_8300Match-

Node

netappaff_a400_firmwareMatch-

AND

netappaff_a400Match-

Node

netappfabric-attached_storage_a400_firmwareMatch-

AND

netappfabric-attached_storage_a400Match-

Node

netappa250_firmwareMatch-

AND

netappa250Match-

Node

netappaff_500f_firmwareMatch-

AND

netappaff_500fMatch-

Node

netappfas_500f_firmwareMatch-

AND

netappfas_500fMatch-

References

lkml.org/lkml/2020/6/7/379

security.netapp.com/advisory/ntap-20201218-0002/

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2020-15436

cbl_mariner1 redhatcve1 veracode1 debiancve1 prion1 cve1 osv3 cvelist1 ubuntucve1 nessus38 redhat7 oraclelinux4 qualysblog1 openvas21 ibm3 suse4 photon5 ubuntu1 ics1