Ubuntu.comUB:CVE-2020-1547CVE-2020-1547
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.5%
An elevation of privilege vulnerability exists when the Windows Backup
Engine improperly handles memory. To exploit this vulnerability, an
attacker would first have to gain execution on the victim system. An
attacker could then run a specially crafted application to elevate
privileges. The security update addresses the vulnerability by correcting
how the Windows Backup Engine handles memory.
Notes
| Author | Note |
|---|---|
| leosilva | since 5.5 is no longer upstream supported and so far we cannot patch it, marking it as ignored. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 16.04 | noarch | mariadb-10.0 | <Â any | UNKNOWN |
| ubuntu | 18.04 | noarch | mariadb-10.1 | <Â any | UNKNOWN |
| ubuntu | 20.04 | noarch | mariadb-10.3 | <Â any | UNKNOWN |
| ubuntu | 18.04 | noarch | mysql-5.7 | <Â 5.7.27-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 16.04 | noarch | mysql-5.7 | <Â 5.7.27-0ubuntu0.16.04.1 | UNKNOWN |
| ubuntu | 19.10 | noarch | mysql-8.0 | <Â 8.0.19-0ubuntu0.19.10.3 | UNKNOWN |
| ubuntu | 20.04 | noarch | mysql-8.0 | <Â 8.0.19-0ubuntu4 | UNKNOWN |
| ubuntu | 20.10 | noarch | mysql-8.0 | <Â 8.0.19-0ubuntu4 | UNKNOWN |
| ubuntu | 21.04 | noarch | mysql-8.0 | <Â 8.0.19-0ubuntu4 | UNKNOWN |
| ubuntu | 21.10 | noarch | mysql-8.0 | <Â 8.0.19-0ubuntu4 | UNKNOWN |
Related
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.5%