Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-11935

Опубликовано: 15 апр. 2020
Источник: redhat
CVSS3: 0
EPSS Низкий

Описание

It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.

A flaw improperly managed inode reference counts in the vfsub_dentry_open() in the Linux kernel aufs subsystem was found in the way local user calls vfsub_dentry_open() method. A local user could use this flaw to crash the system.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-altNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise MRG 2kernelNot affected

Показывать по

Дополнительная информация

Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1903678kernel: panic hit by kube-proxy iptables-save/restore

EPSS

Процентиль: 9%
0.00034
Низкий

0 Low

CVSS3

Связанные уязвимости

CVSS3: 4.4
ubuntu
почти 3 года назад

It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.

CVSS3: 4.4
nvd
почти 3 года назад

It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.

CVSS3: 4.4
debian
почти 3 года назад

It was discovered that aufs improperly managed inode reference counts ...

CVSS3: 5.5
github
почти 3 года назад

It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.

CVSS3: 5.5
fstec
почти 6 лет назад

Уязвимость функции vfsub_dentry_open файловой системы Another UnionFS, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 9%
0.00034
Низкий

0 Low

CVSS3