Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-35501

Опубликовано: 05 мар. 2021
Источник: redhat
CVSS3: 3.4
EPSS Низкий

Описание

A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem

Меры по смягчению последствий

This syscall can still be audited by using the 'syscall auditing feature' by passing open_by_handle_at to it in the rule. Existing auditing ruleset requirements generally use this mechanism.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kernelOut of support scope
Red Hat Enterprise Linux 6kernelOut of support scope
Red Hat Enterprise Linux 7kernelFix deferred
Red Hat Enterprise Linux 7kernel-altOut of support scope
Red Hat Enterprise Linux 7kernel-rtFix deferred
Red Hat Enterprise Linux 8kernelFix deferred
Red Hat Enterprise Linux 8kernel-rtFix deferred
Red Hat Enterprise Linux 9kernelFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-863
https://bugzilla.redhat.com/show_bug.cgi?id=1908577kernel: audit not logging access to syscall open_by_handle_at for users with CAP_DAC_READ_SEARCH capability

EPSS

Процентиль: 26%
0.00088
Низкий

3.4 Low

CVSS3

Связанные уязвимости

CVSS3: 3.4
ubuntu
больше 3 лет назад

A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem

CVSS3: 3.4
nvd
больше 3 лет назад

A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem

CVSS3: 3.4
msrc
больше 3 лет назад

Описание отсутствует

CVSS3: 3.4
debian
больше 3 лет назад

A flaw was found in the Linux kernels implementation of audit rules, w ...

CVSS3: 3.4
github
больше 3 лет назад

A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystem

EPSS

Процентиль: 26%
0.00088
Низкий

3.4 Low

CVSS3