Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-11565
HistoryApr 06, 2020 - 1:15 a.m.

CVE-2020-11565

2020-04-0601:15:12
CWE-787
[email protected]
web.nvd.nist.gov

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”

Affected configurations

NVD
Node
linuxlinux_kernelRange≤5.6.2
Node
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch20.04lts

Related

cbl_mariner 1
veracode 1
debiancve 1
cve 1
prion 1
f5 1
vulnrichment 1
redhatcve 1
ubuntucve 1
cvelist 1
nessus 41
ubuntu 7
openvas 21
photon 6
cloudfoundry 1
debian 7
osv 5
mageia 2
virtuozzo 2
redhat 7
slackware 1
ibm 3
almalinux 1
oraclelinux 2
centos 1
cbl_mariner
cbl_mariner
CVE-2020-11565 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
veracode
veracode
Denial Of Service (DoS)
2020-11-05 03:09:58
debiancve
debiancve
CVE-2020-11565
2020-04-06 01:15:12
cve
cve
CVE-2020-11565
2020-04-06 01:15:12
prion
prion
Stack overflow
2020-04-06 01:15:00
f5
f5
K20378113 : Linux kernel vulnerability CVE-2020-11565
2020-06-03 00:00:00
vulnrichment
vulnrichment
CVE-2020-11565
2020-04-06 00:08:41
redhatcve
redhatcve
CVE-2020-11565
2020-04-16 17:03:50
ubuntucve
ubuntucve
CVE-2020-11565
2020-04-06 00:00:00
cvelist
cvelist
CVE-2020-11565
2020-04-06 00:08:41
nessus
nessus
Photon OS 3.0: Linux PHSA-2020-3.0-0082
2020-04-22 00:00:00
Photon OS 2.0: Linux PHSA-2020-2.0-0230
2020-04-22 00:00:00
Ubuntu 20.04 LTS : Linux kernel regression (USN-4367-2)
2020-05-29 00:00:00
ubuntu
ubuntu
Linux kernel regression
2020-05-28 00:00:00
Linux kernel vulnerabilities
2020-05-24 00:00:00
Linux kernel vulnerabilities
2020-05-28 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4367-2)
2020-05-29 00:00:00
Ubuntu: Security Advisory (USN-4367-1)
2020-05-20 00:00:00
Ubuntu: Security Advisory (USN-4363-1)
2020-05-19 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0230
2020-04-15 00:00:00
Important Photon OS Security Update - PHSA-2020-0230
2020-04-13 00:00:00
Important Photon OS Security Update - PHSA-2020-0082
2020-04-22 00:00:00
cloudfoundry
cloudfoundry
USN-4363-1: Linux kernel vulnerabilities | Cloud Foundry
2020-06-22 00:00:00
debian
debian
[SECURITY] [DSA 4667-1] linux security update
2020-04-28 20:33:13
[SECURITY] [DSA 4667-1] linux security update
2020-04-28 20:33:13
[SECURITY] [DLA 2242-1] linux-4.9 security update
2020-06-10 10:48:38
osv
osv
linux - security update
2020-04-28 00:00:00
linux - security update
2020-06-09 00:00:00
linux-4.9 - security update
2020-06-09 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2020-04-25 23:55:48
Updated kernel packages fix security vulnerabilities
2020-04-25 23:55:48
virtuozzo
virtuozzo
Important kernel security update: New kernel 2.6.32-042stab144.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
2020-05-21 00:00:00
Important kernel security update: New kernel 2.6.32-042stab144.1; Virtuozzo 6.0 Update 12 Hotfix 51 (6.0.12-3757)
2020-05-21 00:00:00
redhat
redhat
(RHSA-2020:2854) Important: kernel-alt security and bug fix update
2020-07-07 12:47:22
(RHSA-2020:4609) Moderate: kernel-rt security and bug fix update
2020-11-03 12:20:02
(RHSA-2020:4062) Important: kernel-rt security and bug fix update
2020-09-29 18:41:41
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2020-06-11 21:36:19
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel and Java affect IBM Spectrum Protect Plus
2021-03-03 21:46:54
Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities in kernel.
2022-07-07 11:14:38
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2021-02-02 05:06:51
almalinux
almalinux
Moderate: kernel security, bug fix, and enhancement update
2020-11-03 12:03:57
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2020-11-10 00:00:00
kernel security, bug fix, and enhancement update
2020-10-06 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2020-10-20 18:20:15

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

6.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON
Related for NVD:CVE-2020-11565
cbl_mariner1veracode1debiancve1cve1prion1f51vulnrichment1redhatcve1ubuntucve1cvelist1nessus41ubuntu7openvas21photon6cloudfoundry1debian7osv5mageia2virtuozzo2redhat7slackware1ibm3almalinux1oraclelinux2centos1