CVE-2020-13143: linux kernel +23 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-13143

CVSS 6.5 · Medium EPSS 5,2%

Kerentanan Out-of-bounds Read pada linux kernel, opensuse leap +22 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.

Rincian

Terbit di NVD: 18 Mei 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-125: Out-of-bounds Read
EPSS (30 hari): 5,2% peluang dieksploitasi; lebih tinggi dari 92,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Versi 3.16 hingga 5.6.13
opensuse	leap	Versi 15.1
opensuse	leap	Versi 15.2
debian	debian linux	Versi 8.0
debian	debian linux	Versi 9.0
debian	debian linux	Versi 10.0
canonical	ubuntu linux	Versi 14.04
canonical	ubuntu linux	Versi 16.04
canonical	ubuntu linux	Versi 18.04
canonical	ubuntu linux	Versi 19.10
canonical	ubuntu linux	Versi 20.04
netapp	active iq unified manager	Semua versi
netapp	cloud backup	Semua versi
netapp	element software	Semua versi
netapp	hci management node	Semua versi
netapp	solidfire	Semua versi
netapp	steelstore cloud integrated storage	Semua versi
netapp	solidfire baseboard management controller firmware	Semua versi
netapp	bootstrap os	Semua versi
netapp	a700s firmware	Semua versi
netapp	h300s firmware	Semua versi
netapp	h500s firmware	Semua versi
netapp	h700s firmware	Semua versi
netapp	h300e firmware	Semua versi
netapp	h500e firmware	Semua versi
netapp	h700e firmware	Semua versi
netapp	h410s firmware	Semua versi
netapp	h410c firmware	Semua versi
netapp	h610c firmware	Semua versi
netapp	h610s firmware	Semua versi
netapp	h615c firmware	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=d126cf46f829d146dde3e6a8963e095ac6cfcd1... mailing list · patch · advisory vendor
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=15753588bcd4bbffae1cca33c8ced572... patch · advisory vendor
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html mailing list · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html mailing list · advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20200608-0001/ advisory pihak ketiga
https://usn.ubuntu.com/4411-1/ advisory pihak ketiga
https://usn.ubuntu.com/4412-1/ advisory pihak ketiga
https://usn.ubuntu.com/4413-1/ advisory pihak ketiga
https://usn.ubuntu.com/4414-1/ advisory pihak ketiga
https://usn.ubuntu.com/4419-1/ advisory pihak ketiga
https://www.debian.org/security/2020/dsa-4698 advisory pihak ketiga
https://www.debian.org/security/2020/dsa-4699 advisory pihak ketiga
https://www.spinics.net/lists/linux-usb/msg194331.html advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.