Lucene search

K
redhatcveRedhat.comRH:CVE-2020-13143
HistoryJun 11, 2020 - 2:30 p.m.

CVE-2020-13143

2020-06-1114:30:35
redhat.com
access.redhat.com
32

EPSS

0.007

Percentile

79.6%

gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal ‘\0’ value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.