Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2020-8428
HistoryJan 29, 2020 - 12:00 a.m.

CVE-2020-8428

2020-01-2900:00:00
ubuntu.com
ubuntu.com
24

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

9.3%

JSON

fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky
use-after-free, which allows local users to cause a denial of service
(OOPS) or possibly obtain sensitive information from kernel memory, aka
CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX
domain socket, if the socket is being moved to a new parent directory and
its old parent directory is being removed.

Notes

Author Note
alexmurray Original fix caused a regression so need second commit as well
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-96.97UNKNOWN
ubuntu19.10noarchlinux< 5.3.0-46.38UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-177.207UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1065.69UNKNOWN
ubuntu19.10noarchlinux-aws< 5.3.0-1016.17UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1065.69) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1105.116UNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1065.69~16.04.1UNKNOWN
ubuntu18.04noarchlinux-azure< 5.0.0-1036.38UNKNOWN
ubuntu19.10noarchlinux-azure< 5.3.0-1019.20UNKNOWN
Rows per page:
1-10 of 411

Related

photon 6
cve 1
prion 1
cbl_mariner 1
ubuntu 6
nessus 21
openvas 21
redhatcve 1
debiancve 1
cloudfoundry 1
mageia 2
osv 3
debian 5
threatpost 1
ibm 1
suse 1
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0219
2020-03-15 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0279
2020-02-21 00:00:00
Important Photon OS Security Update - PHSA-2020-0219
2020-02-20 00:00:00
cve
cve
CVE-2020-8428
2020-01-29 00:15:00
prion
prion
Design/Logic Flaw
2020-01-29 00:15:00
cbl_mariner
cbl_mariner
CVE-2020-8428 affecting package kernel 5.4.91-6
2021-04-06 23:51:14
ubuntu
ubuntu
Linux kernel vulnerability
2020-04-06 00:00:00
Linux kernel vulnerabilities
2020-04-07 00:00:00
Linux kernel vulnerabilities
2020-04-07 00:00:00
nessus
nessus
Photon OS 2.0: Linux PHSA-2020-2.0-0219
2020-03-24 00:00:00
Ubuntu 16.04 LTS : Linux kernel vulnerability (USN-4320-1)
2020-04-07 00:00:00
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4319-1)
2020-04-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4320-1)
2020-04-07 00:00:00
Ubuntu: Security Advisory (USN-4325-1)
2020-04-08 00:00:00
Ubuntu: Security Advisory (USN-4324-1)
2020-04-08 00:00:00
redhatcve
redhatcve
CVE-2020-8428
2020-04-08 22:01:05
debiancve
debiancve
CVE-2020-8428
2020-01-29 00:15:00
cloudfoundry
cloudfoundry
USN-4318-1: Linux kernel vulnerabilities | Cloud Foundry
2020-05-14 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2020-02-04 14:07:12
Updated kernel-linus packages fix security vulnerabilities
2020-02-18 17:05:53
osv
osv
linux - security update
2020-04-28 00:00:00
linux-4.9 - security update
2020-06-09 00:00:00
linux - security update
2020-06-09 00:00:00
debian
debian
[SECURITY] [DSA 4667-1] linux security update
2020-04-28 20:33:13
[SECURITY] [DSA 4667-1] linux security update
2020-04-28 20:33:13
[SECURITY] [DSA 4698-1] linux security update
2020-06-09 19:44:16
threatpost
threatpost
Two Critical Android Bugs Open Door to RCE
2020-06-02 17:10:58
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus
2020-02-22 00:41:51
suse
suse
Security update for the Linux Kernel (important)
2020-03-13 00:00:00

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

0.0004 Low

EPSS

Percentile

9.3%

JSON
Related for UB:CVE-2020-8428
photon6cve1prion1cbl_mariner1ubuntu6nessus21openvas21redhatcve1debiancve1cloudfoundry1mageia2osv3debian5threatpost1ibm1suse1