CVE-2020-12659

Katalog CVE

CVSS 6.7 · Medium EPSS 0,71%

Kerentanan Out-of-bounds Write pada linux kernel, netapp active iq unified manager +6 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.

Rincian

Terbit di NVD

5 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,71% peluang dieksploitasi; lebih tinggi dari 52,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.kernel.org/show_bug.cgi?id=207225 exploit · issue tracking · advisory vendor
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7 release notes · advisory vendor
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99e3a236dd43d06c65af0a2ef9cb44306ae... patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/99e3a236dd43d06c65af0a2ef9cb44306aef6e02 patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html mailing list · advisory pihak ketiga · vdb entry
• https://security.netapp.com/advisory/ntap-20200608-0001/ advisory pihak ketiga
• https://usn.ubuntu.com/4387-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4388-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4389-1/ advisory pihak ketiga