Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-8835

Опубликовано: 02 апр. 2020
Источник: ubuntu
Приоритет: high
EPSS Средний
CVSS2: 7.2
CVSS3: 7.8

Описание

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

РелизСтатусПримечание
bionic

not-affected

4.13.0-16.19
devel

not-affected

5.4.0-26.30
eoan

released

5.3.0-45.37
esm-infra-legacy/trusty

not-affected

3.11.0-12.19
esm-infra/bionic

not-affected

4.13.0-16.19
esm-infra/focal

not-affected

5.4.0-21.25
esm-infra/xenial

not-affected

4.2.0-16.19
focal

not-affected

5.4.0-21.25
precise/esm

not-affected

3.0.0-12.20
trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1001.1
devel

not-affected

5.4.0-1009.9
eoan

released

5.3.0-1015.16
esm-infra-legacy/trusty

not-affected

4.4.0-1002.2
esm-infra/bionic

not-affected

4.15.0-1001.1
esm-infra/focal

not-affected

5.4.0-1007.7
esm-infra/xenial

not-affected

4.4.0-1001.10
focal

not-affected

5.4.0-1007.7
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

not-affected

devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

not-affected

4.15.0-1030.31~16.04.1
focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1002.2
devel

not-affected

5.4.0-1010.10
eoan

released

5.3.0-1018.19
esm-infra-legacy/trusty

not-affected

4.15.0-1023.24~14.04.1
esm-infra/bionic

not-affected

4.15.0-1002.2
esm-infra/focal

not-affected

5.4.0-1008.8
esm-infra/xenial

not-affected

4.11.0-1009.9
focal

not-affected

5.4.0-1008.8
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

released

5.3.0-1018.19~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.3.0-1018.19~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

end of life, was needs-triage
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1001.1
devel

not-affected

5.4.0-1009.9
eoan

released

5.3.0-1016.17
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1001.1
esm-infra/focal

not-affected

5.4.0-1007.7
esm-infra/xenial

not-affected

4.10.0-1004.4
focal

not-affected

5.4.0-1007.7
precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

released

5.3.0-1016.17~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.3.0-1016.17~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

end of life, was needs-triage
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1030.32
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1030.32
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.0.0-1011.11~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.7~rc1

Показывать по

РелизСтатусПримечание
bionic

released

5.3.0-1016.17~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.7~rc1

Показывать по

РелизСтатусПримечание
bionic

released

5.3.0-45.37~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.3.0-45.37~18.04.1
esm-infra/focal

DNE

esm-infra/xenial

not-affected

4.8.0-36.36~16.04.1
focal

DNE

precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

end of life, was needs-triage
esm-infra/focal

DNE

esm-infra/xenial

not-affected

focal

DNE

precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1002.2
devel

not-affected

5.4.0-1009.9
eoan

released

5.3.0-1014.15
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1002.2
esm-infra/focal

not-affected

5.4.0-1006.6
esm-infra/xenial

not-affected

4.4.0-1004.9
focal

not-affected

5.4.0-1006.6
precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

not-affected

3.13.0-24.46~precise1
trusty

DNE

trusty/esm

DNE

upstream

released

5.7~rc1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

eoan

DNE

esm-infra-legacy/trusty

not-affected

4.4.0-13.29~14.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

not-affected

4.4.0-13.29~14.04.1
upstream

released

5.7~rc1

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1002.3
devel

DNE

eoan

not-affected

4.15.0-1035.40
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1002.3
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

5.6.0-1007.7
eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.6.0-1007.7
focal

not-affected

5.6.0-1007.7
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.7~rc1

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.0.0-1010.11
devel

DNE

eoan

not-affected

5.0.0-1010.11
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.7~rc1

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1007.9
devel

not-affected

5.4.0-1009.9
eoan

released

5.3.0-1013.14
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1007.9
esm-infra/focal

not-affected

5.4.0-1007.7
esm-infra/xenial

not-affected

4.15.0-1007.9~16.04.1
focal

not-affected

5.4.0-1007.7
precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.0.0-1007.12~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.0.0-1007.12~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

released

5.3.0-1013.14~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.3.0-1013.14~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.13.0-1005.5
devel

ignored

end of life, was needs-triage
eoan

released

5.3.0-1021.23
esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

replaced by linux-raspi
focal

ignored

end of life, was needs-triage
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.7~rc1

Показывать по

РелизСтатусПримечание
bionic

released

5.3.0-1021.23~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.7~rc1

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.4.0-1077.82
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.7~rc1

Показывать по

Ссылки на источники

EPSS

Процентиль: 96%
0.23074
Средний

7.2 High

CVSS2

7.8 High

CVSS3

Связанные уязвимости

redhat логотип

CVE-2020-8835

CVSS3: 7
redhat
больше 5 лет назад

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

nvd логотип

CVE-2020-8835

CVSS3: 7.8
nvd
больше 5 лет назад

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

debian логотип

CVE-2020-8835

CVSS3: 7.8
debian
больше 5 лет назад

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/veri ...

github логотип

GHSA-774r-wvx9-mm68

CVSS3: 7.8
github
около 3 лет назад

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

fstec логотип

BDU:2020-05727

CVSS3: 7.8
fstec
больше 5 лет назад

Уязвимость компонента kernel/bpf/verifier.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 96%
0.23074
Средний

7.2 High

CVSS2

7.8 High

CVSS3

Уязвимость CVE-2020-8835