CVE-2020-8992

Katalog CVE

CVSS 5.5 · Medium EPSS 0,42%

Kerentanan Uncontrolled Resource Consumption pada linux kernel, canonical ubuntu linux +8 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.

Rincian

Terbit di NVD

14 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-834: Excessive Iteration

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://patchwork.ozlabs.org/patch/1236118/ patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200313-0003/ advisory pihak ketiga
• https://usn.ubuntu.com/4318-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4324-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4342-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4344-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4419-1/ advisory pihak ketiga