PT-2020-6663 · Linux+5 · Linux Kernel+5

Kiyin · Publicado 2020-11-02 · Atualizado 2023-02-12 · CVE-2020-25672

Positive Technologies (AI Summary) · Pt

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Nome do software vulnerável e versões afetadas

Kernel do Linux (versões afetadas não especificadas)

Descrição

Foi detectado um problema de vazamento de memória no kernel do Linux, especificamente na função llcp sock connect() relacionada ao protocolo NFC. Esse problema está associado à desalocação incorreta de memória antes da remoção da última referência, o que poderia permitir que um invasor remoto causasse uma negação de serviço.

Recomendações

No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

Exploit

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

ALT-PU-2021-1666

ALT-PU-2021-1706

ALT-PU-2021-1720

ALT-PU-2021-1739

ALT-PU-2021-2370

ALT-PU-2021-2672

ALT-PU-2021-2677

ALT-PU-2021-2678

ALT-PU-2021-2737

ALT-PU-2021-2751

ALT-PU-2022-1240

AZL-34855

AZL-6524

BDU:2022-03141

CVE-2020-25672

DLA-2689-1

DLA-2690-1

MGASA-2021-0191

MGASA-2021-0192

OPENSUSE-SU-2021:0579-1

OPENSUSE-SU-2021:0758-1

OPENSUSE-SU-2021:1975-1

OPENSUSE-SU-2021:1977-1

OPENSUSE-SU-2021_0579-1

OPENSUSE-SU-2021_0758-1

OPENSUSE-SU-2021_1975-1

OPENSUSE-SU-2021_1977-1

SUSE-SU-2021:1210-1

SUSE-SU-2021:1211-1

SUSE-SU-2021:1238-1

SUSE-SU-2021:1248-1

SUSE-SU-2021:1266-1

SUSE-SU-2021:1301-1

SUSE-SU-2021:1573-1

SUSE-SU-2021:1596-1

SUSE-SU-2021:1617-1

SUSE-SU-2021:1623-1

SUSE-SU-2021:1624-1

SUSE-SU-2021:1625-1

SUSE-SU-2021:1975-1

SUSE-SU-2021:1977-1

SUSE-SU-2022:0234-1

SUSE-SU-2022:0243-1

SUSE-SU-2022:0255-1

SUSE-SU-2022:0263-1

SUSE-SU-2022:0291-1

SUSE-SU-2022:0293-1

SUSE-SU-2022:0296-1

SUSE-SU-2022:0325-1

USN-4948-1

USN-4977-1

USN-4979-1

USN-4982-1

USN-4999-1

USN-5343-1

Produtos afetados

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

Referências · 681

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490 · Exploit
• 🔥 https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/PaloAltoNetworks/can-ctr-escape-cve-2022-0492 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-22555-PipeVersion · Exploit
• 🔥 https://github.com/chenaotian/CVE-2022-0492 · Exploit
• 🔥 https://github.com/0xdevil/CVE-2021-42008 · Exploit
• 🔥 https://github.com/xyjl-ly/CVE-2021-22555-Exploit · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-25636-PipeVersion · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit