Lucene search
PRIOn knowledge basePRION:CVE-2020-15704HistorySep 01, 2020 - 12:15 a.m.
Design/Logic Flaw
2020-09-0100:15:00
PRIOn knowledge base
www.prio-n.com
2
The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files. Fixed in 2.4.5-5ubuntu1.4, 2.4.5-5.1ubuntu2.3+esm2, 2.4.7-1+2ubuntu1.16.04.3, 2.4.7-2+2ubuntu1.3, 2.4.7-2+4.1ubuntu5.1, 2.4.7-2+4.1ubuntu6. Was ZDI-CAN-11504.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ppp | eq | < 2.4.7-1ubuntu1.16.4.3 | |
| ppp | eq | < 2.4.7-22ubuntu1.3 | |
| ppp | eq | < 2.4.7-24.1ubuntu5.1 | |
| ppp | eq | < 2.4.5-5ubuntu1.4 | |
| ppp | eq | < 2.4.5-5.1ubuntu2.3esm2 |
Related
redhatcve
redhatcve
CVE-2020-15704
2020-09-10 10:02:18
cvelist
cvelist
CVE-2020-15704 pppd arbitrary file read information disclosure vulnerability
2020-08-04 00:00:00
ubuntu
ubuntu
ppp vulnerability
2020-08-04 00:00:00
ppp vulnerability
2020-08-06 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ppp vulnerability (USN-4451-1)
2020-08-06 00:00:00
nvd
nvd
CVE-2020-15704
2020-09-01 00:15:09
cve
cve
CVE-2020-15704
2020-09-01 00:15:09
zdi
zdi
openvas
openvas
Ubuntu: Security Advisory (USN-4451-2)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-4451-1)
2020-08-05 00:00:00
debiancve
debiancve
CVE-2020-15704
2020-09-01 00:15:09
ubuntucve
ubuntucve
CVE-2020-15704
2020-08-04 00:00:00