PT-2020-5371 · Linux +9 · Linux Kernel +9

🗓️ 15 Sep 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Linux kernel before 5.8.13 has flawed signature verification in Secure Boot and keyring; upgrade to 5.8.13+.

Reporter	Title	Published	Views	Family All 22507
BDU FSTEC	The vulnerability of the ip_ra_control function in the net/ipv4/ip_sockglue.c component of the Linux operating system, related to pointer dereferencing errors, allows a hacker to trigger a service failure.	7 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `con_insert_unipair` function in the Linux kernel’s `drivers/tty/vt/consolemap.c` file allows a malicious actor to trigger a service failure by improperly releasing memory before deleting the last reference.	7 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `ip6_ra_control` function in the `net/ipv6/ipv6_sockglue.c` component of the Linux kernel, related to pointer dereferencing errors, allows a malicious actor to trigger a service failure.	7 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `drivers/accessibility/speakup/spk_ttyio.c` component of the Linux kernel allows a malicious actor to trigger a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the spk_ttyio_receive_buf2() function in the Linux operating system allows a hacker to cause a service failure.	28 Jan 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of components fs/ext4/inode.c and fs/ext4/super.c in the Linux operating system’s kernel, which allows a hacker to cause a service failure	29 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities in the mm/madvise.c and mm/msync.c components of the Linux kernel allow a hacker to trigger a service failure.	29 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Kernel Samepage Merging (KSM) component in the Linux operating system allows a hacker to influence the confidentiality of information.	6 Apr 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the KVM virtualization subsystem in Linux operating systems allows a attacker to trigger a service failure or execute arbitrary code.	12 Apr 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the NFS protocol in Linux operating systems allows a hacker to trigger a service failure.	11 Jul 201900:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/theori-io/CVE-2022-32250-exploit
github	www.github.com/chompie1337/Linux_LPE_io_uring_CVE-2021-41073
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037

23 Dec 2022 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 21.4 - 9.3

CVSS 3.18.8 - 9.8

CVSS 37.8

CVSS 48.7

EPSS0.78684

SSVC