PT-2020-5371 · Linux+9 · Linux Kernel+9

Publicado 2020-09-15 · Atualizado 2022-12-23 · CVE-2020-26541

Positive Technologies (AI Summary) · Pt

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Nome do software vulnerável e versões afetadas

Versões do kernel Linux anteriores à 5.8.13

Descrição

O problema está relacionado à verificação incorreta de assinaturas criptográficas no kernel Linux. Isso poderia permitir que um invasor comprometesse a confidencialidade, a integridade e a disponibilidade de informações protegidas. O problema afeta o mecanismo de proteção do Banco de Dados de Assinaturas Proibidas do Secure Boot, especificamente nos arquivos certs/blacklist.c e certs/system keyring.c.

Recomendações

Para versões do kernel Linux anteriores à 5.8.13, atualize para a versão 5.8.13 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso a áreas sensíveis do sistema para minimizar o risco de exploração.

Exploit

Correção

Improper Verification of Cryptographic Signature

Information Disclosure

Enumeração de Fraquezas

CWE-347

CWE-200

Identificadores relacionados

ALSA-2021:2570

ALT-PU-2020-2982

ALT-PU-2020-3069

ALT-PU-2020-3210

ALT-PU-2020-3553

ALT-PU-2021-1083

ALT-PU-2021-1105

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

ALT-PU-2021-2102

ALT-PU-2021-2103

ALT-PU-2021-2201

ALT-PU-2021-2207

ALT-PU-2021-2221

ALT-PU-2021-2370

ALT-PU-2021-2672

ALT-PU-2021-2677

ALT-PU-2021-2678

ALT-PU-2021-2737

ALT-PU-2021-2751

ALT-PU-2022-1240

BDU:2021-00284

CESA-2021_2570

CESA-2021_2599

CVE-2020-26541

MGASA-2021-0347

MGASA-2021-0348

OPENSUSE-SU-2022:2173-1

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2022_2172-1

OPENSUSE-SU-2022_2173-1

RHSA-2021:2570

RHSA-2021:2599

RHSA-2021:2666

RHSA-2021:2718

RHSA-2021:2719

RHSA-2021_2570

RHSA-2021_2599

RLSA-2021:2570

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022:2172-1

SUSE-SU-2022:2173-1

SUSE-SU-2022:2177-1

SUSE-SU-2022:2377-1

SUSE-SU-2022:2382-1

SUSE-SU-2022:2393-1

SUSE-SU-2022:2407-1

SUSE-SU-2022:2629-1

SUSE-SU-2022:4561-1

SUSE-SU-2022:4611-1

SUSE-SU-2022_2377-1

SUSE-SU-2022_2382-1

SUSE-SU-2022_2407-1

USN-5070-1

USN-5106-1

USN-5120-1

USN-5210-1

USN-5210-2

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

Referências · 415

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/chompie1337/Linux_LPE_io_uring_CVE-2021-41073 · Exploit
• 🔥 https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/cgwalters/cve-2020-14386 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-22555-PipeVersion · Exploit
• 🔥 https://github.com/xyjl-ly/CVE-2021-22555-Exploit · Exploit