Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-2732

Опубликовано: 08 апр. 2020
Источник: nvd
CVSS3: 5.8
CVSS3: 6.8
CVSS2: 2.3
EPSS Низкий

Описание

A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 62%
0.00438
Низкий

5.8 Medium

CVSS3

6.8 Medium

CVSS3

2.3 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.8
ubuntu
около 5 лет назад

A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.

CVSS3: 5.8
redhat
больше 5 лет назад

A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.

CVSS3: 5.8
debian
около 5 лет назад

A flaw was discovered in the way that the KVM hypervisor handled instr ...

github
около 3 лет назад

A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.

oracle-oval
больше 5 лет назад

ELSA-2020-5543: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 62%
0.00438
Низкий

5.8 Medium

CVSS3

6.8 Medium

CVSS3

2.3 Low

CVSS2

Дефекты

CWE-200