CVE-2020-6106

🗓️ 15 Oct 2020 14:48:33Reported by talosType

An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13

Reporter	Title	Published	Views	Family All 24
AlpineLinux	CVE-2020-6106	15 Oct 202014:48	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в f2fs-tools	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the F2fs-Tools tool, related to reading beyond the memory boundaries, allows a intruder to access confidential information.	17 Dec 202100:00	–	bdu_fstec
Cvelist	CVE-2020-6106	15 Oct 202014:48	–	cvelist
Debian CVE	CVE-2020-6106	15 Oct 202014:48	–	debiancve
EUVD	EUVD-2020-27260	7 Oct 202500:30	–	euvd
Tenable Nessus	GLSA-202101-26 : f2fs-tools: Multiple vulnerabilities	26 Jan 202100:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-6106	26 Aug 202500:00	–	nessus
Gentoo Linux	f2fs-tools: Multiple vulnerabilities	26 Jan 202100:00	–	gentoo
NVD	CVE-2020-6106	15 Oct 202015:15	–	nvd

NVD

Vulners

Node

f2fs-tools_project f2fs-toolsRange<1.14.0

[
  {
    "product": "F2fs-Tools",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "F2fs-Tools F2fs.Fsck 1.12, F2fs-Tools F2fs.Fsck 1.13"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202101-26
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2020-1048

21 Nov 2024 05:35Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24.3

CVSS 3.15.5

CVSS 34.4

EPSS0.00292