Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-9391

Опубликовано: 25 фев. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 2.1
CVSS3: 5.5

Описание

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.

РелизСтатусПримечание
bionic

not-affected

4.13.0-16.19
devel

not-affected

5.4.0-26.30
eoan

not-affected

5.0.0-13.14
esm-infra-legacy/trusty

not-affected

3.11.0-12.19
esm-infra/bionic

not-affected

4.13.0-16.19
esm-infra/focal

not-affected

5.4.0-18.22
esm-infra/xenial

not-affected

4.2.0-16.19
focal

not-affected

5.4.0-18.22
precise/esm

not-affected

3.0.0-12.20
trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1001.1
devel

not-affected

5.4.0-1009.9
eoan

not-affected

5.0.0-1004.4
esm-infra-legacy/trusty

not-affected

4.4.0-1002.2
esm-infra/bionic

not-affected

4.15.0-1001.1
esm-infra/focal

not-affected

5.4.0-1005.5
esm-infra/xenial

not-affected

4.4.0-1001.10
focal

not-affected

5.4.0-1005.5
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.0.0-1021.24~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.0.0-1021.24~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

esm-infra/xenial

not-affected

4.15.0-1030.31~16.04.1
focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1002.2
devel

not-affected

5.4.0-1010.10
eoan

not-affected

5.0.0-1004.4
esm-infra-legacy/trusty

not-affected

4.15.0-1023.24~14.04.1
esm-infra/bionic

not-affected

4.15.0-1002.2
esm-infra/focal

not-affected

5.4.0-1006.6
esm-infra/xenial

not-affected

4.11.0-1009.9
focal

not-affected

5.4.0-1006.6
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.3.0-1007.8~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.3.0-1007.8~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

end of life, was needs-triage
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1001.1
devel

not-affected

5.4.0-1009.9
eoan

not-affected

5.0.0-1004.4
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1001.1
esm-infra/focal

not-affected

5.4.0-1005.5
esm-infra/xenial

not-affected

4.10.0-1004.4
focal

not-affected

5.4.0-1005.5
precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.3.0-1008.9~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.3.0-1008.9~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

end of life, was needs-triage
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1030.32
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1030.32
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.0.0-1011.11~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.6~rc3

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.3.0-1011.12~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.6~rc3

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.18.0-13.14~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.18.0-13.14~18.04.1
esm-infra/focal

DNE

esm-infra/xenial

not-affected

4.8.0-36.36~16.04.1
focal

DNE

precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

ignored

end of life, was needs-triage
esm-infra/focal

DNE

esm-infra/xenial

ignored

end of life, was needs-triage
focal

DNE

precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1002.2
devel

not-affected

5.4.0-1009.9
eoan

not-affected

5.0.0-1004.4
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1002.2
esm-infra/focal

not-affected

5.4.0-1004.4
esm-infra/xenial

not-affected

4.4.0-1004.9
focal

not-affected

5.4.0-1004.4
precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

not-affected

3.13.0-24.46~precise1
trusty

DNE

trusty/esm

DNE

upstream

released

5.6~rc3

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

eoan

DNE

esm-infra-legacy/trusty

not-affected

4.4.0-13.29~14.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

not-affected

4.4.0-13.29~14.04.1
upstream

released

5.6~rc3

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1002.3
devel

DNE

eoan

not-affected

4.15.0-1035.40
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1002.3
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

5.6.0-1007.7
eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

5.6.0-1007.7
focal

not-affected

5.6.0-1007.7
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.6~rc3

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.0.0-1010.11
devel

DNE

eoan

not-affected

5.0.0-1010.11
esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.6~rc3

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.15.0-1007.9
devel

not-affected

5.4.0-1009.9
eoan

not-affected

4.15.0-1011.13
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

4.15.0-1007.9
esm-infra/focal

not-affected

5.4.0-1005.5
esm-infra/xenial

not-affected

4.15.0-1007.9~16.04.1
focal

not-affected

5.4.0-1005.5
precise/esm

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.0.0-1007.12~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.0.0-1007.12~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.3.0-1011.12~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

5.3.0-1011.12~18.04.1
esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.13.0-1005.5
devel

ignored

end of life, was pending
eoan

not-affected

5.0.0-1006.6
esm-infra-legacy/trusty

DNE

esm-infra/focal

ignored

replaced by linux-raspi
focal

ignored

end of life, was pending
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.6~rc3

Показывать по

РелизСтатусПримечание
bionic

not-affected

5.3.0-1017.19~18.04.1
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.6~rc3

Показывать по

РелизСтатусПримечание
bionic

not-affected

4.4.0-1077.82
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

5.6~rc3

Показывать по

Ссылки на источники

EPSS

Процентиль: 38%
0.00161
Низкий

2.1 Low

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

redhat логотип

CVE-2020-9391

CVSS3: 5.5
redhat
больше 5 лет назад

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.

nvd логотип

CVE-2020-9391

CVSS3: 5.5
nvd
больше 5 лет назад

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.

debian логотип

CVE-2020-9391

CVSS3: 5.5
debian
больше 5 лет назад

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 ...

github логотип

GHSA-gpf5-7vrh-q24p

CVSS3: 5.5
github
около 3 лет назад

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.

fstec логотип

BDU:2020-01076

CVSS3: 5.5
fstec
больше 5 лет назад

Уязвимость архитектуры AArch64 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 38%
0.00161
Низкий

2.1 Low

CVSS2

5.5 Medium

CVSS3