Lucene search

K
osvGoogleOSV:CVE-2020-6107
HistoryOct 15, 2020 - 3:15 p.m.

CVE-2020-6107

2020-10-1515:15:11
Google
osv.dev
3
information disclosure
f2fs-tools
f2fs.fsck
vulnerability
dev_read
filesystem
uninitialized read
attack

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

39.9%

An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

39.9%