CVE-2020-29371

Опубликовано: 28 нояб. 2020

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.

Ссылки

https://bugs.chromium.org/p/project-zero/issues/detail?id=2077
Exploit
Issue Tracking
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4
Release Notes
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592
Patch
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd
Patch
Vendor Advisory
https://bugs.chromium.org/p/project-zero/issues/detail?id=2077
Exploit
Issue Tracking
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4
Release Notes
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2935e0a3cec1ffa558eea90db6279cff83aa3592
Patch
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcf85fcedfdd17911982a3e3564fcfec7b01eebd
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.8.4 (исключая)

EPSS

Процентиль: 16%

0.00051

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-908

Связанные уязвимости

CVE-2020-29371

CVSS3: 3.3

ubuntu

около 5 лет назад

An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.

CVE-2020-29371

redhat

больше 5 лет назад

An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.

CVE-2020-29371

CVSS3: 3.3

msrc

около 5 лет назад

An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace aka CID-bcf85fcedfdd.

CVE-2020-29371

CVSS3: 3.3

debian

около 5 лет назад

An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the ...

GHSA-rf5f-q4mx-qc4v

github

больше 3 лет назад

An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.

EPSS

Процентиль: 16%

0.00051

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-908