Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37098
HistorySep 16, 2022 - 7:53 p.m.

Use After Free

2022-09-1619:53:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

0.8 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.7%

linux-dell300x:bionic is vulnerable to use after free. The vulnerability exists due to a race condition between kobject creation and delete which allows a remote attacker to leak kernel information via a CAP_NET_ADMIN privilege.

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

0.8 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.7%