Lucene search

CVE-2020-14331

🗓️ 15 Sep 2020 19:12:15Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 393 Views

Flaw in Linux kernel's VGA console resize ioctl VT_RESIZE causes out-of-bounds write, leading to system crash & privilege escalation

Reporter	Title	Published	Views	Family All 155
RedhatCVE	CVE-2020-14331	28 Jul 202011:38	–	redhatcve
Veracode	Remote Code Execution (RCE)	21 Oct 202006:30	–	veracode
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-14331	4 Mar 202500:00	–	nessus
Tenable Nessus	Photon OS 2.0: Linux PHSA-2020-2.0-0266	29 Jul 202000:00	–	nessus
Tenable Nessus	Photon OS 3.0: Linux PHSA-2020-3.0-0119	29 Jul 202000:00	–	nessus
Tenable Nessus	Photon OS 1.0: Linux PHSA-2020-1.0-0310	29 Jul 202000:00	–	nessus
Tenable Nessus	RHEL 7 : kernel (RHSA-2020:5023)	11 Nov 202000:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : kernel on SL7.x x86_64 (2020:5023)	12 Nov 202000:00	–	nessus
Tenable Nessus	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2020-5878)	10 Oct 202000:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (RHSA-2020:5023)	18 Nov 202000:00	–	nessus

Nvd

Node

linux linux_kernelRange≤5.7.19

linux linux_kernelMatch5.8.0rc1

linux linux_kernelMatch5.8.0rc2

linux linux_kernelMatch5.8.0rc3

linux linux_kernelMatch5.8.0rc4

linux linux_kernelMatch5.8.0rc5

linux linux_kernelMatch5.8.0rc6

Node

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

[
  {
    "product": "Linux Kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions of the Linux kernel"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2020/10/msg00034.html
lists	www.lists.debian.org/debian-lts-announce/2020/09/msg00025.html
lists	www.lists.openwall.net/linux-kernel/2020/07/29/234
lists	www.lists.debian.org/debian-lts-announce/2020/10/msg00032.html
openwall	www.openwall.com/lists/oss-security/2020/07/28/2
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Sep 2020 19:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS27.2

CVSS36.6

EPSS0.00023

CWE-787