Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-28974

Опубликовано: 20 нояб. 2020
Источник: nvd
CVSS3: 5
CVSS2: 6.1
EPSS Низкий

Описание

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 5.9.7 (исключая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 18%
0.00058
Низкий

5 Medium

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5
ubuntu
больше 4 лет назад

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.

CVSS3: 5
redhat
больше 4 лет назад

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.

CVSS3: 5
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 5
debian
больше 4 лет назад

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 co ...

github
около 3 лет назад

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.

EPSS

Процентиль: 18%
0.00058
Низкий

5 Medium

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-125