CVE-2020-35513

Katalog CVE

CVSS 4.9 · Medium EPSS 1,3%

Kerentanan Privilege Dropping / Lowering Errors pada linux kernel, redhat enterprise linux. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with access to the NFS could use this flaw to starve the resources causing denial of service.

Rincian

Terbit di NVD

26 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-271: Privilege Dropping / Lowering Errors

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1911309 issue tracking · patch · advisory pihak ketiga
• https://patchwork.kernel.org/project/linux-nfs/patch/20180403203916.GH20297%40fieldses.org/