Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-8835
HistoryApr 02, 2020 - 6:15 p.m.

CVE-2020-8835

2020-04-0218:15:18
CWE-125
CWE-787
[email protected]
web.nvd.nist.gov
3

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

JSON

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

Affected configurations

NVD
Node
linuxlinux_kernelRange5.4.7–5.4.29
OR
linuxlinux_kernelRange5.5.0–5.5.14
OR
linuxlinux_kernelRange5.6–5.6.1
Node
fedoraprojectfedoraMatch30
OR
fedoraprojectfedoraMatch31
OR
fedoraprojectfedoraMatch32
Node
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.10
Node
netappcloud_backupMatch-
OR
netapphci_management_nodeMatch-
OR
netappsolidfireMatch-
OR
netappsteelstore_cloud_integrated_storageMatch-
Node
netappa700s_firmwareMatch-
AND
netappa700sMatch-
Node
netapp8300_firmwareMatch-
AND
netapp8300Match-
Node
netapp8700_firmwareMatch-
AND
netapp8700Match-
Node
netappa400_firmwareMatch-
AND
netappa400Match-
Node
netappa320_firmwareMatch-
AND
netappa320Match-
Node
netappc190_firmwareMatch-
AND
netappc190Match-
Node
netappa220_firmwareMatch-
AND
netappa220Match-
Node
netappfas2720_firmwareMatch-
AND
netappfas2720Match-
Node
netappfas2750_firmwareMatch-
AND
netappfas2750Match-
Node
netappa800_firmwareMatch-
AND
netappa800Match-
Node
netapph300s_firmwareMatch-
AND
netapph300sMatch-
Node
netapph500s_firmwareMatch-
AND
netapph500sMatch-
Node
netapph700s_firmwareMatch-
AND
netapph700sMatch-
Node
netapph300e_firmwareMatch-
AND
netapph300eMatch-
Node
netapph500e_firmwareMatch-
AND
netapph500eMatch-
Node
netapph700e_firmwareMatch-
AND
netapph700eMatch-
Node
netapph410s_firmwareMatch-
AND
netapph410sMatch-
Node
netapph610c_firmwareMatch-
AND
netapph610cMatch-
Node
netapph610s_firmwareMatch-
AND
netapph610sMatch-
Node
netapph615c_firmwareMatch-
AND
netapph615cMatch-

References

Related

ubuntucve 1
f5 1
fedora 8
cvelist 1
zdi 1
nessus 4
githubexploit 4
archlinux 3
ubuntu 1
openvas 11
cve 1
redhatcve 2
debiancve 1
prion 1
attackerkb 2
zdt 1
packetstorm 2
mageia 2
metasploit 1
oraclelinux 1
ubuntucve
ubuntucve
CVE-2020-8835
2020-03-30 00:00:00
f5
f5
K18004724 : Linux kernel vulnerability CVE-2020-8835
2020-05-08 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: kernel-headers-5.5.15-200.fc31
2020-04-07 03:24:29
[SECURITY] Fedora 32 Update: kernel-5.6.2-300.fc32
2020-04-05 00:19:19
[SECURITY] Fedora 31 Update: kernel-5.5.15-200.fc31
2020-04-07 03:24:29
cvelist
cvelist
CVE-2020-8835 Linux kernel bpf verifier vulnerability
2020-03-30 00:00:00
zdi
zdi
(Pwn2Own) Linux Kernel eBPF Improper Input Validation Privilege Escalation Vulnerability
2020-03-31 00:00:00
nessus
nessus
Ubuntu 18.04 LTS : Linux kernel vulnerability (USN-4313-1)
2020-03-31 00:00:00
Fedora 31 : kernel / kernel-headers / kernel-tools (2020-666f3b1ac3)
2020-04-07 00:00:00
Fedora 30 : kernel / kernel-headers / kernel-tools (2020-73c00eda1c)
2020-04-16 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Read in Linux Linux Kernel
2020-10-18 03:17:58
Exploit for CVE-2020-8835
2020-09-16 19:38:43
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Linux Kernel
2020-11-09 11:58:34
archlinux
archlinux
[ASA-202004-2] linux-hardened: privilege escalation
2020-04-01 00:00:00
[ASA-202004-3] linux-lts: privilege escalation
2020-04-01 00:00:00
[ASA-202004-4] linux: privilege escalation
2020-04-01 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2020-03-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4313-1)
2020-03-31 00:00:00
Fedora: Security Advisory for kernel-headers (FEDORA-2020-666f3b1ac3)
2020-04-09 00:00:00
Fedora: Security Advisory for kernel-tools (FEDORA-2020-666f3b1ac3)
2020-04-09 00:00:00
cve
cve
CVE-2020-8835
2020-04-02 18:15:18
redhatcve
redhatcve
CVE-2020-8835
2020-04-04 17:33:29
CVE-2021-31440
2021-05-24 15:13:24
debiancve
debiancve
CVE-2020-8835
2020-04-02 18:15:18
prion
prion
Out-of-bounds
2020-04-02 18:15:00
attackerkb
attackerkb
CVE-2020-8835
2020-03-30 00:00:00
CVE-2021-33909
2021-07-20 00:00:00
zdt
zdt
Linux eBPF ALU32 32-bit Invalid Bounds Tracking Local Privilege Escalation Exploit
2021-09-01 00:00:00
packetstorm
packetstorm
Linux eBPF ALU32 32-bit Invalid Bounds Tracking Local Privilege Escalation
2021-09-01 00:00:00
Sequoia: A Deep Root In Linux's Filesystem Layer
2021-07-21 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2020-04-03 01:48:49
Updated kernel-linus packages fix security vulnerabilities
2020-04-04 01:53:32
metasploit
metasploit
Linux eBPF ALU32 32-bit Invalid Bounds Tracking LPE
2021-08-17 23:01:14
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2020-04-27 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

JSON
Related for NVD:CVE-2020-8835
ubuntucve1f51fedora8cvelist1zdi1nessus4githubexploit4archlinux3ubuntu1openvas11cve1redhatcve2debiancve1prion1attackerkb2zdt1packetstorm2mageia2metasploit1oraclelinux1