Ubuntu.comUB:CVE-2020-36694CVE-2020-36694
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
MULTIPLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:M/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
An issue was discovered in netfilter in the Linux kernel before 5.10. There
can be a use-after-free in the packet processing context, because the
per-CPU sequence count is mishandled during concurrent iptables rules
replacement. This could be exploited with the CAP_NET_ADMIN capability in
an unprivileged namespace. NOTE: cc00bca was reverted in 5.12.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | linux | < 4.15.0-143.147 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux | < 5.4.0-73.82 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux | < 4.4.0-222.255) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-kvm | < 4.15.0-1091.93 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-kvm | < 5.4.0-1039.40 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-kvm | < 4.4.0-1103.112) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-hwe | < 4.15.0-143.147~16.04.3) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-gcp-4.15 | < 4.15.0-1099.112 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-gkeop | < 5.4.0-1015.16 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-raspi | < 5.4.0-1035.38 | UNKNOWN |
References
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc00bcaa589914096edef7fb87ca5cee4a166b5c
launchpad.net/bugs/cve/CVE-2020-36694
nvd.nist.gov/vuln/detail/CVE-2020-36694
security-tracker.debian.org/tracker/CVE-2020-36694
syzkaller.appspot.com/bug?id=0c4fd9c6aa04ec116d01e915d3b186f71a212cb2
www.cve.org/CVERecord?id=CVE-2020-36694
Related
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
MULTIPLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:M/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%