Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-14385

Опубликовано: 15 сент. 2020
Источник: nvd
CVSS3: 5.5
CVSS3: 5.5
CVSS2: 4.7
EPSS Низкий

Описание

A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 5.9.0 (исключая)
cpe:2.3:o:linux:linux_kernel:5.9.0:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc3:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 8%
0.00032
Низкий

5.5 Medium

CVSS3

5.5 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-131
CWE-131

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 5 лет назад

A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.

CVSS3: 6.2
redhat
почти 5 лет назад

A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.

CVSS3: 5.5
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 5.5
debian
почти 5 лет назад

A flaw was found in the Linux kernel before 5.9-rc4. A failure of the ...

CVSS3: 5.5
github
около 3 лет назад

A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.

EPSS

Процентиль: 8%
0.00032
Низкий

5.5 Medium

CVSS3

5.5 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-131
CWE-131