PT-2020-1811 · Linux+3 · Linux Kernel+3

Shijie Luo · Publicado 2020-02-13 · Atualizado 2022-04-27 · CVE-2020-8992

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Nome do software vulnerável e versões afetadas

Versões do kernel Linux até a 5.5.3

Descrição

O problema está relacionado à função ext4 protect reserved inode no kernel Linux, que pode levar a uma negação de serviço (bloqueio parcial) quando explorada. Isso é causado por um consumo descontrolado de recursos, permitindo que um invasor perturbe o sistema.

Recomendações

Para versões do kernel Linux até a 5.5.3, atualize para uma versão posterior à 5.5.3 para resolver o problema.

No momento, não há informações sobre outras medidas de mitigação específicas para esta vulnerabilidade.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-834

CWE-400

Identificadores relacionados

ALT-PU-2020-1251

ALT-PU-2020-1316

ALT-PU-2020-1421

ALT-PU-2020-1450

ALT-PU-2020-1714

ALT-PU-2020-2164

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2020-01073

CVE-2020-8992

OPENSUSE-SU-2020:0336-1

OPENSUSE-SU-2020_0336-1

SUSE-SU-2020:0511-1

SUSE-SU-2020:0558-1

SUSE-SU-2020:0559-1

SUSE-SU-2020:0560-1

SUSE-SU-2020:0580-1

SUSE-SU-2020:0584-1

SUSE-SU-2020:0649-1

SUSE-SU-2020:0667-1

SUSE-SU-2020:0688-1

SUSE-SU-2020:1255-1

SUSE-SU-2020:1275-1

SUSE-SU-2020:1663-1

SUSE-SU-2020_1663-1

USN-4318-1

USN-4324-1

USN-4342-1

USN-4344-1

USN-4419-1

Produtos afetados

Alt Linux

Linux Kernel

Suse

Ubuntu

Referências · 564

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19319 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19318 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19927 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-22555-PipeVersion · Exploit
• 🔥 https://github.com/xyjl-ly/CVE-2021-22555-Exploit · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-25636-PipeVersion · Exploit
• 🔥 https://github.com/butterflyhack/CVE-2019-10207 · Exploit