Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-16166
HistoryJul 30, 2020 - 12:00 a.m.

CVE-2020-16166

2020-07-3000:00:00
ubuntu.com
ubuntu.com
28

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.002

Percentile

60.9%

The Linux kernel through 5.7.11 allows remote attackers to make
observations that help to obtain sensitive information about the internal
state of the network RNG, aka CID-f227e3ec3b5c. This is related to
drivers/char/random.c and kernel/time/timer.c.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-118.119UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-48.52UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.15.0-118.119~16.04.1UNKNOWN
ubuntu18.04noarchlinux-hwe-5.4< 5.4.0-48.52~18.04.1UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1025.25UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1083.87UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1025.25~18.04.1UNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1083.87~16.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1026.26UNKNOWN
ubuntu14.04noarchlinux-azure< 4.15.0-1096.106~14.04.1UNKNOWN
Rows per page:
1-10 of 321

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.002

Percentile

60.9%