Ubuntu.comUB:CVE-2020-10767CVE-2020-10767
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
5.1%
A flaw was found in the Linux kernel before 5.8-rc1 in the implementation
of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB
mitigation will be disabled when STIBP is not available or when the
Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This
flaw allows a local attacker to perform a Spectre V2 style attack when this
configuration is active. The highest threat from this vulnerability is to
confidentiality.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | linux | < 4.15.0-115.116 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux | < 5.4.0-45.49 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux | < 4.4.0-186.216 | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws | < 4.15.0-1080.84 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-aws | < 5.4.0-1022.22 | UNKNOWN |
| ubuntu | 14.04 | noarch | linux-aws | < 4.4.0-1075.79 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-aws | < 4.4.0-1111.123 | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws-5.3 | < 5.3.0-1032.34~18.04.2 | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws-5.4 | < 5.4.0-1022.22~18.04.1 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-aws-hwe | < 4.15.0-1080.84~16.04.1 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2020-10767
nvd.nist.gov/vuln/detail/CVE-2020-10767
security-tracker.debian.org/tracker/CVE-2020-10767
ubuntu.com/security/notices/USN-4427-1
ubuntu.com/security/notices/USN-4439-1
ubuntu.com/security/notices/USN-4440-1
ubuntu.com/security/notices/USN-4483-1
ubuntu.com/security/notices/USN-4485-1
www.cve.org/CVERecord?id=CVE-2020-10767
www.openwall.com/lists/oss-security/2020/06/10/1
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
5.1%