Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2020-35508
HistoryDec 31, 2020 - 12:00 a.m.

CVE-2020-35508

2020-12-3100:00:00
ubuntu.com
ubuntu.com
15

4.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

A flaw possibility of race condition and incorrect initialization of the
process id was found in the Linux kernel child/parent process
identification handling while filtering signal handlers. A local attacker
is able to abuse this flaw to bypass checks to send any signal to a
privileged process.

Notes

Author Note
mdeslaur possibly Red Hat specific, but bug lists upstream commits, needs investigation
sbeattie The upstream commit is with respect to the race condition, not the improper initialization.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-129.132UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-59.65UNKNOWN
ubuntu20.10noarchlinux< 5.8.0-44.50UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-198.230UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1091.96UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1034.35UNKNOWN
ubuntu20.10noarchlinux-aws< 5.8.0-1024.26UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1083.87) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1119.133UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1034.35~18.04.1UNKNOWN
Rows per page:
1-10 of 541

Related

veracode 1
cve 1
cbl_mariner 2
debiancve 1
prion 1
redhatcve 1
ibm 2
redhat 6
nessus 11
oraclelinux 2
ubuntu 2
osv 3
openvas 2
almalinux 1
veracode
veracode
Privlege Escalation
2021-02-03 04:26:36
cve
cve
CVE-2020-35508
2021-03-26 17:15:00
cbl_mariner
cbl_mariner
CVE-2020-35508 affecting package kernel 5.10.78.1-1
2022-04-09 06:52:47
CVE-2020-35508 affecting package kernel 5.10.189.1-1
2021-09-09 15:03:26
debiancve
debiancve
CVE-2020-35508
2021-03-26 17:15:00
prion
prion
Race condition
2021-03-26 17:15:00
redhatcve
redhatcve
CVE-2020-35508
2021-01-04 13:00:29
ibm
ibm
Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System
2021-12-21 18:13:50
Security Bulletin: Vulnerabilities in the Linux Kernel, Samba, Sudo, Python, and tcmu-runner affect IBM Spectrum Protect Plus
2022-05-06 02:35:57
redhat
redhat
(RHSA-2021:2718) Important: kernel security and bug fix update
2021-07-20 13:20:33
(RHSA-2021:2719) Important: kernel-rt security and bug fix update
2021-07-20 13:18:50
(RHSA-2021:1739) Important: kernel-rt security and bug fix update
2021-05-18 05:58:02
nessus
nessus
RHEL 8 : kernel (RHSA-2021:2718)
2021-07-21 00:00:00
RHEL 8 : kernel-rt (RHSA-2021:2719)
2021-07-21 00:00:00
OracleVM 3.4 : kernel-uek (OVMSA-2021-0016)
2021-06-10 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2021-05-06 00:00:00
kernel security, bug fix, and enhancement update
2021-05-25 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2021-02-25 00:00:00
Linux kernel (OEM) vulnerabilities
2021-02-25 00:00:00
osv
osv
linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.8, linux-kvm, linux-oracle, linux-raspi vulnerabilities
2021-02-25 06:43:06
linux-oem-5.6 vulnerabilities
2021-02-25 06:54:20
Important: kernel security, bug fix, and enhancement update
2021-05-18 05:33:57
openvas
openvas
Ubuntu: Security Advisory (USN-4751-1)
2021-02-26 00:00:00
Ubuntu: Security Advisory (USN-4752-1)
2021-02-26 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2021-05-18 05:33:57

4.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON
Related for UB:CVE-2020-35508
veracode1cve1cbl_mariner2debiancve1prion1redhatcve1ibm2redhat6nessus11oraclelinux2ubuntu2osv3openvas2almalinux1