PT-2020-13970 · Linux+7 · Linux Kernel+7

Jay Shin

·

Published

2020-06-05

·

Updated

2022-10-25

·

CVE-2020-14314

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.9-rc2
Description A memory out-of-bounds read flaw was found in the way the Linux kernel accesses a directory with broken indexing using the ext3/ext4 file system. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability.
Recommendations For Linux kernel versions prior to 5.9-rc2, update to version 5.9-rc2 or later to resolve the issue.

Exploit

Fix

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2021:1578
ALT-PU-2020-2864
ALT-PU-2020-2888
ALT-PU-2020-3210
ALT-PU-2020-3553
ALT-PU-2021-1083
ALT-PU-2021-1105
ALT-PU-2021-1621
ALT-PU-2021-1656
ALT-PU-2021-1739
ALT-PU-2021-1862
ALT-PU-2021-1866
ALT-PU-2021-1870
CESA-2020_5437
CESA-2021_1578
CESA-2021_1739
CVE-2020-14314
DLA-2385-1
DLA-2420-1
DLA-2420-2
MGASA-2020-0355
OPENSUSE-SU-2020:1325-1
OPENSUSE-SU-2020:1382-1
OPENSUSE-SU-2020_1325-1
OPENSUSE-SU-2020_1382-1
OPENSUSE-SU-2021:0242-1
OPENSUSE-SU-2021_0242-1
RHSA-2020:5437
RHSA-2020:5441
RHSA-2020_5437
RHSA-2020_5441
RHSA-2021:1578
RHSA-2021:1739
RHSA-2021_1578
RHSA-2021_1739
SUSE-SU-2020:2485-1
SUSE-SU-2020:2486-1
SUSE-SU-2020:2540-1
SUSE-SU-2020:2541-1
SUSE-SU-2020:2574-1
SUSE-SU-2020:2575-1
SUSE-SU-2020:2576-1
SUSE-SU-2020:2582-1
SUSE-SU-2020:2605-1
SUSE-SU-2020:2610-1
SUSE-SU-2020:2623-1
SUSE-SU-2020:2631-1
SUSE-SU-2020_2485-1
SUSE-SU-2020_2486-1
SUSE-SU-2020_2631-1
USN-4576-1
USN-4578-1
USN-4579-1
USN-4752-1

Affected Products

Alt Linux
Almalinux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu