Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-82f5-ghc6-rj5c

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

EPSS

Процентиль: 1%
0.00011
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-763

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

CVSS3: 6.7
redhat
почти 6 лет назад

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

CVSS3: 6.5
nvd
больше 2 лет назад

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

CVSS3: 5.5
msrc
больше 2 лет назад

Copy_from_user Spectre-V1 Gadget in Linux Kernel

CVSS3: 6.5
debian
больше 2 лет назад

Copy_from_user on 64-bit versions of the Linux kernel does not impleme ...

EPSS

Процентиль: 1%
0.00011
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-763