Lucene search
UbuntuUSN-4489-1HistorySep 08, 2020 - 12:00 a.m.
Linux kernel vulnerability
2020-09-0800:00:00
ubuntu.com
145
linux kernel
af_packet
ubuntu
denial of service
arbitrary code
bounds checking
security vulnerability
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.3
Confidence
High
EPSS
0
Percentile
14.2%
Releases
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Packages
- linux - Linux kernel
- linux-aws - Linux kernel for Amazon Web Services (AWS) systems
- linux-aws-5.3 - Linux kernel for Amazon Web Services (AWS) systems
- linux-aws-5.4 - Linux kernel for Amazon Web Services (AWS) systems
- linux-aws-hwe - Linux kernel for Amazon Web Services (AWS-HWE) systems
- linux-azure - Linux kernel for Microsoft Azure Cloud systems
- linux-azure-4.15 - Linux kernel for Microsoft Azure Cloud systems
- linux-azure-5.4 - Linux kernel for Microsoft Azure cloud systems
- linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
- linux-gcp-4.15 - Linux kernel for Google Cloud Platform (GCP) systems
- linux-gcp-5.4 - Linux kernel for Google Cloud Platform (GCP) systems
- linux-gke-4.15 - Linux kernel for Google Container Engine (GKE) systems
- linux-gke-5.0 - Linux kernel for Google Container Engine (GKE) systems
- linux-gke-5.3 - Linux kernel for Google Container Engine (GKE) systems
- linux-hwe - Linux hardware enablement (HWE) kernel
- linux-hwe-5.4 - Linux hardware enablement (HWE) kernel
- linux-kvm - Linux kernel for cloud environments
- linux-oem - Linux kernel for OEM systems
- linux-oem-osp1 - Linux kernel for OEM systems
- linux-oracle - Linux kernel for Oracle Cloud systems
- linux-oracle-5.4 - Linux kernel for Oracle Cloud systems
- linux-raspi - Linux kernel for Raspberry Pi (V8) systems
- linux-raspi-5.4 - Linux kernel for Raspberry Pi (V8) systems
- linux-raspi2 - Linux kernel for Raspberry Pi (V8) systems
- linux-raspi2-5.3 - Linux kernel for Raspberry Pi (V8) systems
- linux-snapdragon - Linux kernel for Qualcomm Snapdragon processors
Details
Or Cohen discovered that the AF_PACKET implementation in the Linux
kernel did not properly perform bounds checking in some situations. A
local attacker could use this to cause a denial of service (system
crash) or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 20.04 | noarch | linux-image-5.4.0-1018-raspi | < 5.4.0-1018.20 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-buildinfo-5.4.0-1018-raspi | < 5.4.0-1018.20 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-headers-5.4.0-1018-raspi | < 5.4.0-1018.20 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-image-5.4.0-1018-raspi-dbgsym | < 5.4.0-1018.20 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-modules-5.4.0-1018-raspi | < 5.4.0-1018.20 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-raspi-headers-5.4.0-1018 | < 5.4.0-1018.20 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-raspi-tools-5.4.0-1018 | < 5.4.0-1018.20 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-tools-5.4.0-1018-raspi | < 5.4.0-1018.20 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-image-5.4.0-1024-aws | < 5.4.0-1024.24 | UNKNOWN |
| Ubuntu | 20.04 | noarch | linux-aws-headers-5.4.0-1024 | < 5.4.0-1024.24 | UNKNOWN |
References
Related
openvas
openvas
Fedora: Security Advisory for kernel (FEDORA-2020-468121099e)
2020-09-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2579-1)
2021-06-09 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2020-b858b48b23)
2020-09-11 00:00:00
nessus
nessus
Photon OS 2.0: Linux PHSA-2020-2.0-0282
2020-09-12 00:00:00
SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2578-1)
2020-09-10 00:00:00
Photon OS 3.0: Linux PHSA-2020-3.0-0140
2020-09-14 00:00:00
photon
photon
redhatcve
redhatcve
CVE-2020-14386
2020-09-07 05:48:46
debiancve
debiancve
CVE-2020-14386
2020-09-16 13:15:11
prion
prion
Memory corruption
2020-09-16 13:15:00
nvd
nvd
CVE-2020-14386
2020-09-16 13:15:11
veracode
veracode
Privilege Escalation
2020-09-21 06:28:18
f5
f5
K58523450 : Linux kernel vulnerability CVE-2020-14386
2021-04-07 00:00:00
cloudfoundry
cloudfoundry
USN-4489-1: Linux kernel vulnerability | Cloud Foundry
2020-09-24 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: kernel-5.8.7-300.fc33
2020-09-25 17:17:26
[SECURITY] Fedora 32 Update: kernel-5.8.7-200.fc32
2020-09-10 17:32:35
ubuntu
ubuntu
Kernel Live Patch Security Notice
2020-09-10 00:00:00
Kernel Live Patch Security Notice
2020-10-14 00:00:00
cve
cve
CVE-2020-14386
2020-09-16 13:15:11
cbl_mariner
cbl_mariner
CVE-2020-14386 affecting package kernel 5.4.91-6
2021-03-03 03:44:27
cvelist
cvelist
CVE-2020-14386
2020-09-16 12:48:12
suse
suse
Security update for the Linux Kernel (important)
2020-09-08 00:00:00
Security update for the Linux Kernel (important)
2020-09-08 00:00:00
Security update for the Linux Kernel (important)
2020-10-11 00:00:00
ubuntucve
ubuntucve
CVE-2020-14386
2020-09-04 00:00:00
amazon
amazon
Important: kernel
2020-09-03 21:45:00
Important: kernel
2020-09-03 21:53:00
Important: kernel
2020-11-14 01:22:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Linux Linux Kernel
2020-09-17 21:25:18
osv
osv
redhat
redhat
(RHSA-2020:4331) Important: kpatch-patch security update
2020-10-26 11:00:46
(RHSA-2020:5199) Important: kernel security update
2020-11-24 09:49:27
(RHSA-2020:4332) Important: kpatch-patch security update
2020-10-26 11:00:50
oraclelinux
oraclelinux
kernel security and bug fix update
2020-10-21 00:00:00
Unbreakable Enterprise kernel security update
2020-10-12 00:00:00
Unbreakable Enterprise kernel security update
2020-10-12 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2020-10-21 16:07:53
kitploit
kitploit
debian
debian
[SECURITY] [DLA 2385-1] linux-4.19 security update
2020-09-28 13:31:21
[SECURITY] [DLA 2420-2] linux regression update
2020-10-31 16:14:20
[SECURITY] [DLA 2420-1] linux security update
2020-10-30 14:21:51
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.3
Confidence
High
EPSS
0
Percentile
14.2%
Related for USN-4489-1