Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-29661

Опубликовано: 04 дек. 2020
Источник: redhat
CVSS3: 7.8
EPSS Низкий

Описание

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

A locking vulnerability was found in the tty subsystem of the Linux kernel in drivers/tty/tty_jobctrl.c. This flaw allows a local attacker to possibly corrupt memory or escalate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Меры по смягчению последствий

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.

Дополнительная информация

Статус:

Important
Дефект:
CWE-667->CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1906525kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free

EPSS

Процентиль: 51%
0.00278
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 5 лет назад

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

CVSS3: 7.8
nvd
почти 5 лет назад

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

CVSS3: 7.8
msrc
почти 5 лет назад

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP aka CID-54ffccbf053b.

CVSS3: 7.8
debian
почти 5 лет назад

A locking issue was discovered in the tty subsystem of the Linux kerne ...

CVSS3: 7.8
github
больше 3 лет назад

A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

EPSS

Процентиль: 51%
0.00278
Низкий

7.8 High

CVSS3