Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-11565
HistoryApr 06, 2020 - 1:15 a.m.

CVE-2020-11565

2020-04-0601:15:12
CWE-787
[email protected]
web.nvd.nist.gov
217
cve-2020-11565
linux kernel
vulnerability
mpol_parse_str
mm/mempolicy.c
stack-based
out-of-bounds write
nvd

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

17.9%

JSON

An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”

Affected configurations

NVD
Node
linuxlinux_kernelRange≤5.6.2
Node
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch20.04lts
VendorProductVersionCPE
linuxlinux_kernelcpe:/o:linux:linux_kernel::::

Related

prion 1
debiancve 1
veracode 1
cbl_mariner 1
nvd 1
vulnrichment 1
f5 1
ubuntucve 1
cvelist 1
redhatcve 1
ubuntu 7
openvas 21
photon 5
nessus 41
cloudfoundry 1
debian 7
osv 5
mageia 2
virtuozzo 2
redhat 7
slackware 1
ibm 3
almalinux 1
oraclelinux 2
centos 1
prion
prion
Stack overflow
2020-04-06 01:15:00
debiancve
debiancve
CVE-2020-11565
2020-04-06 01:15:12
veracode
veracode
Denial Of Service (DoS)
2020-11-05 03:09:58
cbl_mariner
cbl_mariner
CVE-2020-11565 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
nvd
nvd
CVE-2020-11565
2020-04-06 01:15:12
vulnrichment
vulnrichment
CVE-2020-11565
2020-04-06 00:08:41
f5
f5
K20378113 : Linux kernel vulnerability CVE-2020-11565
2020-06-03 00:00:00
ubuntucve
ubuntucve
CVE-2020-11565
2020-04-06 00:00:00
cvelist
cvelist
CVE-2020-11565
2020-04-06 00:08:41
redhatcve
redhatcve
CVE-2020-11565
2020-04-16 17:03:50
ubuntu
ubuntu
Linux kernel regression
2020-05-28 00:00:00
Linux kernel vulnerabilities
2020-05-24 00:00:00
Linux kernel vulnerabilities
2020-05-28 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4367-2)
2020-05-29 00:00:00
Ubuntu: Security Advisory (USN-4367-1)
2020-05-20 00:00:00
Ubuntu: Security Advisory (USN-4363-1)
2020-05-19 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0230
2020-04-15 00:00:00
Important Photon OS Security Update - PHSA-2020-0230
2020-04-13 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0290
2020-04-23 00:00:00
nessus
nessus
Ubuntu 20.04 LTS : Linux kernel regression (USN-4367-2)
2020-05-29 00:00:00
Photon OS 2.0: Linux PHSA-2020-2.0-0230
2020-04-22 00:00:00
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4367-1)
2020-05-20 00:00:00
cloudfoundry
cloudfoundry
USN-4363-1: Linux kernel vulnerabilities | Cloud Foundry
2020-06-22 00:00:00
debian
debian
[SECURITY] [DSA 4667-1] linux security update
2020-04-28 20:33:13
[SECURITY] [DSA 4667-1] linux security update
2020-04-28 20:33:13
[SECURITY] [DLA 2242-1] linux-4.9 security update
2020-06-10 10:48:38
osv
osv
linux - security update
2020-04-28 00:00:00
linux - security update
2020-06-09 00:00:00
linux-4.9 - security update
2020-06-09 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2020-04-25 23:55:48
Updated kernel packages fix security vulnerabilities
2020-04-25 23:55:48
virtuozzo
virtuozzo
Important kernel security update: New kernel 2.6.32-042stab144.1; Virtuozzo 6.0 Update 12 Hotfix 51 (6.0.12-3757)
2020-05-21 00:00:00
Important kernel security update: New kernel 2.6.32-042stab144.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2020-05-21 00:00:00
redhat
redhat
(RHSA-2020:2854) Important: kernel-alt security and bug fix update
2020-07-07 12:47:22
(RHSA-2020:4609) Moderate: kernel-rt security and bug fix update
2020-11-03 12:20:02
(RHSA-2020:4062) Important: kernel-rt security and bug fix update
2020-09-29 18:41:41
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2020-06-11 21:36:19
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel and Java affect IBM Spectrum Protect Plus
2021-03-03 21:46:54
Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities in kernel.
2022-07-07 11:14:38
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2021-02-02 05:06:51
almalinux
almalinux
Moderate: kernel security, bug fix, and enhancement update
2020-11-03 12:03:57
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2020-11-10 00:00:00
kernel security, bug fix, and enhancement update
2020-10-06 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2020-10-20 18:20:15

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

17.9%

JSON
Related for CVE-2020-11565
prion1debiancve1veracode1cbl_mariner1nvd1vulnrichment1f51ubuntucve1cvelist1redhatcve1ubuntu7openvas21photon5nessus41cloudfoundry1debian7osv5mageia2virtuozzo2redhat7slackware1ibm3almalinux1oraclelinux2centos1