CVE-2020-9391

Katalog CVE

CVSS 5.5 · Medium EPSS 0,52%

Kerentanan Out-of-bounds Write pada linux kernel, fedoraproject fedora +7 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture. It ignores the top byte in the address passed to the brk system call, potentially moving the memory break downwards when the application expects it to move upwards, aka CID-dcde237319e6. This has been observed to cause heap corruption with the GNU C Library malloc implementation.

Rincian

Terbit di NVD

25 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,52% peluang dieksploitasi; lebih tinggi dari 42,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dcde237319e626d1ec3c9d8b7613032f... mailing list · patch · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1797052 exploit · issue tracking · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2020/02/25/6 exploit · mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200313-0003/ advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4LH35HOPBJIK...