Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2020-10766
HistoryJun 10, 2020 - 12:00 a.m.

CVE-2020-10766

2020-06-1000:00:00
ubuntu.com
ubuntu.com
21

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

A logic bug flaw was found in Linux kernel before 5.8-rc1 in the
implementation of SSBD. A bug in the logic handling allows an attacker with
a local account to disable SSBD protection during a context switch when
additional speculative execution mitigations are in place. This issue was
introduced when the per task/process conditional STIPB switching was added
on top of the existing SSBD switching. The highest threat from this
vulnerability is to confidentiality.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-115.116UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-45.49UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-186.216UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1080.84UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1022.22UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1075.79) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1111.123UNKNOWN
ubuntu18.04noarchlinux-aws-5.3< 5.3.0-1032.34~18.04.2UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1022.22~18.04.1UNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1080.84~16.04.1UNKNOWN
Rows per page:
1-10 of 471

Related

redhatcve 1
cve 1
debiancve 1
prion 1
veracode 1
osv 2
cbl_mariner 1
nessus 36
openvas 26
fedora 2
redhat 7
attackerkb 1
ibm 2
photon 6
amazon 3
ubuntu 5
oraclelinux 1
debian 1
mageia 1
suse 3
threatpost 1
androidsecurity 1
redhatcve
redhatcve
CVE-2020-10766
2020-06-10 10:24:45
cve
cve
CVE-2020-10766
2020-09-15 23:15:00
debiancve
debiancve
CVE-2020-10766
2020-09-15 23:15:00
prion
prion
Design/Logic Flaw
2020-09-15 23:15:00
veracode
veracode
Information Disclosure
2020-07-22 03:54:55
osv
osv
Android Vomit Report
2021-01-01 00:00:00
linux-4.19 - new package
2020-08-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-10766 affecting package kernel 5.4.91-6
2021-03-03 03:44:27
nessus
nessus
Fedora 31 : kernel (2020-1b2dae6219)
2020-06-23 00:00:00
RHEL 8 : kpatch-patch (RHSA-2020:3073)
2023-01-23 00:00:00
Fedora 32 : kernel (2020-125ccdc871)
2020-06-22 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:1713-1)
2021-04-19 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2020-1b2dae6219)
2020-06-23 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2020-125ccdc871)
2020-06-23 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: kernel-5.6.19-300.fc32
2020-06-19 01:05:59
[SECURITY] Fedora 31 Update: kernel-5.6.19-200.fc31
2020-06-23 01:14:58
redhat
redhat
(RHSA-2020:3297) Important: kpatch-patch security update
2020-08-04 07:12:48
(RHSA-2020:3073) Important: kpatch-patch security update
2020-07-21 16:10:15
(RHSA-2020:3041) Important: kernel security and bug fix update
2020-07-21 14:15:28
attackerkb
attackerkb
CVE-2018-3639
2018-05-22 00:00:00
ibm
ibm
Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System
2022-05-25 23:01:32
Security Bulletin: Vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus
2020-11-20 20:41:06
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0256
2020-06-27 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0305
2020-06-30 00:00:00
Important Photon OS Security Update - PHSA-2020-0305
2020-06-25 00:00:00
amazon
amazon
Important: kernel
2020-07-21 16:34:00
Important: kernel
2020-07-21 16:34:00
Important: kernel
2020-07-14 21:14:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2020-07-27 00:00:00
linux kernel vulnerabilities
2020-07-31 00:00:00
Linux kernel vulnerabilities
2020-09-03 00:00:00
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2020-07-24 00:00:00
debian
debian
[SECURITY] [DLA 2323-1] linux-4.19 new package
2020-08-12 16:33:21
mageia
mageia
Updated kernel packages fix security vulnerability
2020-08-18 21:47:25
suse
suse
Security update for the Linux Kernel (important)
2020-07-07 00:00:00
Security update for the Linux Kernel (important)
2020-08-06 00:00:00
Security update for RT kernel (moderate)
2021-02-05 00:00:00
threatpost
threatpost
Google Warns of Critical Android Remote Code Execution Bug
2021-01-05 20:21:40
androidsecurity
androidsecurity
Android Security Bulletin—January 2021
2021-01-04 00:00:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON
Related for UB:CVE-2020-10766
redhatcve1cve1debiancve1prion1veracode1osv2cbl_mariner1nessus36openvas26fedora2redhat7attackerkb1ibm2photon6amazon3ubuntu5oraclelinux1debian1mageia1suse3threatpost1androidsecurity1