Lucene search

Ubuntu.comUB:CVE-2020-0336

HistorySep 17, 2020 - 12:00 a.m.

CVE-2020-0336

2020-09-1700:00:00

ubuntu.com

surfaceflinger

memory corruption

privilege escalation

android-11

android id

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

In SurfaceFlinger, there is possible memory corruption due to type
confusion. This could lead to local escalation of privilege with System
execution privileges needed. User interaction is not needed for
exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchandroid< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	16.04	noarch	android	< any	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2020-0336

nvd.nist.gov/vuln/detail/CVE-2020-0336

security-tracker.debian.org/tracker/CVE-2020-0336

source.android.com/security/bulletin/android-11

www.cve.org/CVERecord?id=CVE-2020-0336

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for UB:CVE-2020-0336