CVE-2020-29374

Published: Nov 28, 2020 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2020-21747 Aliases: GSD-2020-29374
ExploitDB:
Other exploit source:
Google Dorks:
LOW 3,6
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: none
LOW 3,3
Source: [email protected]
Access Vector: local
Access Complexity: medium
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: none

Description

AI Translation Available

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0002
Percentile
0,0th
Updated

EPSS Score Trend (Last 91 Days)

362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Confidentiality Integrity Access Control
Potential Impacts:
Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other) Dos: Crash, Exit, Or Restart Dos: Instability Read Files Or Directories Read Application Data Execute Unauthorized Code Or Commands Gain Privileges Or Assume Identity Bypass Protection Mechanism
Applicable Platforms
Languages: C, C++, Java
Technologies: ICS/OT, Mobile
Likelihood of Exploit: Medium
View CWE Details
863

Incorrect Authorization

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Access Control Availability
Potential Impacts:
Read Application Data Read Files Or Directories Modify Application Data Modify Files Or Directories Gain Privileges Or Assume Identity Bypass Protection Mechanism Execute Unauthorized Code Or Commands Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other)
Applicable Platforms
Technologies: Database Server, Not Technology-Specific, Web Server
Likelihood of Exploit: High
View CWE Details
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

A250 Firmware by Netapp

Product Information
Vendor Netapp
Product A250 Firmware
Version -
cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H410C Firmware by Netapp

Product Information
Vendor Netapp
Product H410C Firmware
Version -
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Hci Compute Node Bios by Netapp

Product Information
Vendor Netapp
Product Hci Compute Node Bios
Version -
cpe:2.3:o:netapp:hci_compute_node_bios:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version Range Affected
To 5.7.3 (exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Solidfire \& Hci Storage Node by Netapp

Product Information
Vendor Netapp
Product Solidfire \& Hci Storage Node
Version -
cpe:2.3:a:netapp:solidfire_\&_hci_storage_node:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Solidfire \& Hci Management Node by Netapp

Product Information
Vendor Netapp
Product Solidfire \& Hci Management Node
Version -
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

500F Firmware by Netapp

Product Information
Vendor Netapp
Product 500F Firmware
Version -
cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://packetstormsecurity.com/files/162117/Kernel-Live-Pat…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-L…
https://bugs.chromium.org/p/project-zero/issues/detail?id=2…
Exploit Issue Tracking Third Party Advisory
https://bugs.chromium.org/p/project-zero/issues/detail?id=2045
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3
Release Notes Third Party Advisory Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li…
Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1…
https://lists.debian.org/debian-lts-announce/2021/06/msg000…
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
https://lists.debian.org/debian-lts-announce/2021/06/msg000…
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
https://lists.debian.org/debian-lts-announce/2022/03/msg000…
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
https://security.netapp.com/advisory/ntap-20210115-0002/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210115-0002/
https://www.debian.org/security/2022/dsa-5096
Third Party Advisory
https://www.debian.org/security/2022/dsa-5096
http://packetstormsecurity.com/files/162117/Kernel-Live-Pat…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-L…
https://bugs.chromium.org/p/project-zero/issues/detail?id=2…
Exploit Issue Tracking Third Party Advisory
https://bugs.chromium.org/p/project-zero/issues/detail?id=2045
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3
Release Notes Third Party Advisory Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li…
Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1…
https://lists.debian.org/debian-lts-announce/2021/06/msg000…
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
https://lists.debian.org/debian-lts-announce/2021/06/msg000…
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
https://lists.debian.org/debian-lts-announce/2022/03/msg000…
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
https://security.netapp.com/advisory/ntap-20210115-0002/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210115-0002/
https://www.debian.org/security/2022/dsa-5096
Third Party Advisory
https://www.debian.org/security/2022/dsa-5096