CVE-2020-8832

Katalog CVE

CVSS 5.5 · Medium EPSS 0,45%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada canonical ubuntu linux, netapp cloud backup +30 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.

Rincian

Terbit di NVD

10 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 37,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840 issue tracking · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200430-0004/ advisory pihak ketiga
• https://usn.ubuntu.com/usn/usn-4302-1 advisory pihak ketiga