Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-20794

Опубликовано: 09 мая 2020
Источник: nvd
CVSS3: 4.7
CVSS2: 4.7
EPSS Низкий

Описание

An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия от 4.18 (включая) до 5.6.11 (включая)

EPSS

Процентиль: 41%
0.00512
Низкий

4.7 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVSS3: 4.7
ubuntu
около 6 лет назад

An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.

CVSS3: 4.7
redhat
около 6 лет назад

An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.

CVSS3: 4.7
msrc
почти 6 лет назад

Описание отсутствует

CVSS3: 4.7
debian
около 6 лет назад

An issue was discovered in the Linux kernel 4.18 through 5.6.11 when u ...

CVSS3: 4.7
github
около 4 лет назад

An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.

EPSS

Процентиль: 41%
0.00512
Низкий

4.7 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-772