7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
13.3%
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server, Virtuozzo Infrastructure Platform, and Virtuozzo Hybrid Infrastructure.
Vulnerability id: CVE-2020-25212
[3.10.0-862.20.2.vz7.73.29 to 3.10.0-1127.8.2.vz7.151.14] NFS v4: potential memory corruption on the client system when processing security attributes. It was discovered that a buffer overflow and memory corruption were possible if a system tried to mount an NFS v4 share where the files had security labels in the file attributes. An attacker would need to control the NFS server and make it send a specific series of responses to trigger the issue. The issue allows the attacker to crash the kernel on the client system or, potentially, escalate their privileges there.
Vulnerability id: CVE-2020-25211
[3.10.0-862.20.2.vz7.73.29 to 3.10.0-1127.8.2.vz7.151.14] netfilter: kernel crash due to a buffer overflow in ctnetlink_parse_tuple_filter(). It was discovered that a local attacker could pass a specially crafted configuration of conntrack to the kernel to cause a buffer overflow in ctnetlink_parse_tuple_filter() function. As a result, the kernel could crash.
Vulnerability id: CVE-2020-14385
[3.10.0-1127.8.2.vz7.151.14] The metadata validator in XFS may flag an inode with a valid extended attribute as corrupt. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service.
access.redhat.com/security/cve/CVE-2020-14385
access.redhat.com/security/cve/CVE-2020-25212
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25211
readykernel.com/patch/Virtuozzo-7/readykernel-patch-116.7-116.0-1.vl7/
readykernel.com/patch/Virtuozzo-7/readykernel-patch-131.10-116.0-1.vl7/
readykernel.com/patch/Virtuozzo-7/readykernel-patch-151.14-116.0-1.vl7/
readykernel.com/patch/Virtuozzo-7/readykernel-patch-73.29-116.0-1.vl7/
readykernel.com/patch/Virtuozzo-7/readykernel-patch-85.17-116.0-1.vl7/
readykernel.com/patch/Virtuozzo-7/readykernel-patch-86.2-116.0-1.vl7/
readykernel.com/patch/Virtuozzo-7/readykernel-patch-96.21-116.0-1.vl7/
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
13.3%