Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-24455

Опубликовано: 26 фев. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6
CVSS3: 6.7

Описание

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.

РелизСтатусПримечание
bionic

not-affected

code not present
devel

not-affected

esm-apps/bionic

not-affected

code not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

code not present
focal

not-affected

code not present
groovy

not-affected

3.0.1-1
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 29%
0.00101
Низкий

4.6 Medium

CVSS2

6.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.1
redhat
больше 5 лет назад

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.

CVSS3: 6.7
nvd
почти 5 лет назад

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.

CVSS3: 6.7
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 6.7
debian
почти 5 лет назад

Missing initialization of a variable in the TPM2 source may allow a pr ...

CVSS3: 6.7
github
больше 3 лет назад

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3.

EPSS

Процентиль: 29%
0.00101
Низкий

4.6 Medium

CVSS2

6.7 Medium

CVSS3