Ubuntu.comUB:CVE-2020-14331CVE-2020-14331
6.6 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
A flaw was found in the Linux kernel’s implementation of the invert video
code on VGA consoles when a local attacker attempts to resize the console,
calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur.
This flaw allows a local user with access to the VGA console to crash the
system, potentially escalating their privileges on the system. The highest
threat from this vulnerability is to data confidentiality and integrity as
well as system availability.
Notes
| Author | Note |
|---|---|
| alexmurray | CONFIG_VGACON_SOFT_SCROLLBACK is required to be enabled for this to be exploitable. This config option is disabled in Ubuntu kernel configs. |
Related
6.6 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%