Lucene search
HistoryMar 24, 2023 - 5:15 p.m.
CVE-2020-36691
linux kernel
cve-2020-36691
denial of service
netlink policy
unbounded recursion
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
5.2
Confidence
High
EPSS
0
Percentile
9.0%
An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbounded recursion) via a nested Netlink policy with a back reference.
Affected configurations
Node
linuxlinux_kernelRange<5.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2020-36691
2023-03-24 00:00:00
cvelist
cvelist
CVE-2020-36691
2023-03-24 00:00:00
debiancve
debiancve
CVE-2020-36691
2023-03-24 17:15:07
cve
cve
CVE-2020-36691
2023-03-24 17:15:07
prion
prion
Code injection
2023-03-24 17:15:00
redhatcve
redhatcve
CVE-2020-36691
2023-03-24 19:42:58
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:2151-1)
2023-05-13 00:00:00
SUSE SLES12 Security Update : kernel (SUSE-SU-2023:2162-1)
2023-05-14 00:00:00
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2023:2163-1)
2023-05-12 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2162-1)
2023-05-11 00:00:00
Ubuntu: Security Advisory (USN-6314-1)
2023-08-30 00:00:00
Ubuntu: Security Advisory (USN-6337-1)
2023-09-05 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-08-28 00:00:00
Linux kernel vulnerabilities
2023-08-17 00:00:00
Linux kernel vulnerabilities
2023-08-29 00:00:00
osv
osv
linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
2023-08-11 16:07:44
linux-azure-5.4 vulnerabilities
2023-09-04 18:36:29
linux-bluefield, linux-ibm vulnerabilities
2023-08-29 17:18:37
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
5.2
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2020-36691