Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2020-35508
HistoryDec 31, 2020 - 12:00 a.m.

CVE-2020-35508

2020-12-3100:00:00
ubuntu.com
ubuntu.com
18
linux kernel
signal handling
privilege escalation

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

4.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

0

Percentile

5.1%

JSON

A flaw possibility of race condition and incorrect initialization of the
process id was found in the Linux kernel child/parent process
identification handling while filtering signal handlers. A local attacker
is able to abuse this flaw to bypass checks to send any signal to a
privileged process.

Notes

Author Note
mdeslaur possibly Red Hat specific, but bug lists upstream commits, needs investigation
sbeattie The upstream commit is with respect to the race condition, not the improper initialization.
OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux-riscv-5.8< 5.8.0-17.19~20.04.1UNKNOWN
ubuntu20.04noarchlinux-bluefield< 5.4.0-1011.14UNKNOWN
ubuntu18.04noarchlinux< 4.15.0-129.132UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-59.65UNKNOWN
ubuntu20.10noarchlinux< 5.8.0-44.50UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-198.230UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1083.87UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1091.96UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1034.35UNKNOWN
ubuntu20.10noarchlinux-aws< 5.8.0-1024.26UNKNOWN
Rows per page:
1-10 of 511

Related

cbl_mariner 2
veracode 1
cve 1
debiancve 1
cvelist 1
prion 1
nvd 1
redhatcve 1
ibm 2
redhat 6
nessus 11
oraclelinux 2
openvas 2
osv 3
ubuntu 2
almalinux 1
cbl_mariner
cbl_mariner
CVE-2020-35508 affecting package kernel for versions less than 5.10.78.1-1
2022-04-09 06:52:47
CVE-2020-35508 affecting package kernel 5.10.189.1-1
2021-09-09 15:03:26
veracode
veracode
Privlege Escalation
2021-02-03 04:26:36
cve
cve
CVE-2020-35508
2021-03-26 17:15:12
debiancve
debiancve
CVE-2020-35508
2021-03-26 17:15:12
cvelist
cvelist
CVE-2020-35508
2021-03-26 16:45:18
prion
prion
Race condition
2021-03-26 17:15:00
nvd
nvd
CVE-2020-35508
2021-03-26 17:15:12
redhatcve
redhatcve
CVE-2020-35508
2021-01-04 13:00:29
ibm
ibm
Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System
2021-12-21 18:13:50
Security Bulletin: Vulnerabilities in the Linux Kernel, Samba, Sudo, Python, and tcmu-runner affect IBM Spectrum Protect Plus
2022-05-06 02:35:57
redhat
redhat
(RHSA-2021:2718) Important: kernel security and bug fix update
2021-07-20 13:20:33
(RHSA-2021:2719) Important: kernel-rt security and bug fix update
2021-07-20 13:18:50
(RHSA-2021:1739) Important: kernel-rt security and bug fix update
2021-05-18 05:58:02
nessus
nessus
RHEL 8 : kernel (RHSA-2021:2718)
2021-07-21 00:00:00
RHEL 8 : kernel-rt (RHSA-2021:2719)
2021-07-21 00:00:00
OracleVM 3.4 : kernel-uek (OVMSA-2021-0016)
2021-06-10 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2021-05-06 00:00:00
kernel security, bug fix, and enhancement update
2021-05-25 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4751-1)
2021-02-26 00:00:00
Ubuntu: Security Advisory (USN-4752-1)
2021-02-26 00:00:00
osv
osv
linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.8, linux-kvm, linux-oracle, linux-raspi vulnerabilities
2021-02-25 06:43:06
linux-oem-5.6 vulnerabilities
2021-02-25 06:54:20
Important: kernel security, bug fix, and enhancement update
2021-05-18 05:33:57
ubuntu
ubuntu
Linux kernel vulnerabilities
2021-02-25 00:00:00
Linux kernel (OEM) vulnerabilities
2021-02-25 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2021-05-18 05:33:57

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

4.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

0

Percentile

5.1%

JSON
Related for UB:CVE-2020-35508
cbl_mariner2veracode1cve1debiancve1cvelist1prion1nvd1redhatcve1ibm2redhat6nessus11oraclelinux2openvas2osv3ubuntu2almalinux1