Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-25670
HistoryNov 02, 2020 - 12:00 a.m.

CVE-2020-25670

2020-11-0200:00:00
ubuntu.com
ubuntu.com
17

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

20.0%

A vulnerability was found in Linux Kernel where refcount leak in
llcp_sock_bind() causing use-after-free which might lead to privilege
escalations.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux-aws-5.8< 5.8.0-1038.40~20.04.1UNKNOWN
ubuntu20.04noarchlinux-azure-5.8< 5.8.0-1036.38~20.04.1UNKNOWN
ubuntu20.04noarchlinux-gcp-5.8< 5.8.0-1035.37~20.04.1UNKNOWN
ubuntu20.04noarchlinux-oracle-5.8< 5.8.0-1033.34~20.04.1UNKNOWN
ubuntu20.04noarchlinux-riscv-5.8< 5.8.0-29.31~20.04.1UNKNOWN
ubuntu20.10noarchlinux-kvm< 5.8.0-1030.32UNKNOWN
ubuntu18.04noarchlinux-kvm< 4.15.0-1092.94UNKNOWN
ubuntu20.04noarchlinux-kvm< 5.4.0-1040.41UNKNOWN
ubuntu21.04noarchlinux-kvm< 5.11.0-1008.8UNKNOWN
ubuntu16.04noarchlinux-kvm< 4.4.0-1103.112) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
Rows per page:
1-10 of 661

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

20.0%