CVE-2020-15704

🗓️ 31 Aug 2020 23:15:14Reported by canonicalType

The modprobe child process could allow non-root attacker to read arbitrary root file

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2020-15704	5 Sep 202009:00	–	circl
Cvelist	CVE-2020-15704 pppd arbitrary file read information disclosure vulnerability	31 Aug 202023:15	–	cvelist
Debian CVE	CVE-2020-15704	31 Aug 202023:15	–	debiancve
EUVD	EUVD-2020-7690	7 Oct 202500:30	–	euvd
NVD	CVE-2020-15704	1 Sep 202000:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-4451-1)	5 Aug 202000:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-4451-2)	26 Aug 202200:00	–	openvas
OSV	UBUNTU-CVE-2020-15704	4 Aug 202017:00	–	osv
OSV	USN-4451-1 ppp vulnerability	4 Aug 202017:21	–	osv
OSV	USN-4451-2 ppp vulnerability	6 Aug 202014:10	–	osv

NVD

Node

canonical pppRange<2.4.7-1+ubuntu1.16.04.3

AND

canonical ubuntu_linuxMatch16.04lts

Node

canonical pppRange<2.4.7-2+2ubuntu1.3

AND

canonical ubuntu_linuxMatch18.04lts

Node

canonical pppRange<2.4.7-2+4.1ubuntu5.1

AND

canonical ubuntu_linuxMatch20.04lts

Node

canonical pppRange<2.4.5-5ubuntu1.4

AND

canonical ubuntu_linuxMatch12.04esm

Node

canonical pppRange<2.4.5-5.1ubuntu2.3+esm2

AND

canonical ubuntu_linuxMatch14.04esm

[
  {
    "product": "ppp",
    "vendor": "Canonical",
    "versions": [
      {
        "changes": [
          {
            "at": "2.4.5-5.1ubuntu2.3+esm2",
            "status": "unaffected"
          }
        ],
        "lessThan": "2.4.5-5ubuntu1.4",
        "status": "affected",
        "version": "2.4.5",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "2.4.7-2+2ubuntu1.3",
            "status": "unaffected"
          },
          {
            "at": "2.4.7-2+4.1ubuntu5.1",
            "status": "unaffected"
          },
          {
            "at": "2.4.7-2+4.1ubuntu6",
            "status": "unaffected"
          }
        ],
        "lessThan": "2.4.7-1+2ubuntu1.16.04.3",
        "status": "affected",
        "version": "2.4.7",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-4451-2
ubuntu	www.ubuntu.com/security/notices/USN-4451-1

21 Nov 2024 05:06Current

5.2Medium risk

Vulners AI Score5.2

CVSS 22.1

CVSS 3.15.5

EPSS0.00105