[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2020-1520 --- kernel, perf, python-perf

ID: oval:org.secpod.oval:def:1700405Date: (C)2020-11-05   (M)2024-05-05
Class: PATCHFamily: unix




A flaw was found in the Linux kernel. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. A flaw was found in the capabilities check of the rados block device functionality in the Linux kernel. Incorrect capability checks could alllow a local user with root priviledges to add or remove Rados Block Devices from the system. A flaw was found in the HDLC_PPP module of the Linux kernel. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. A flaw was found in the Linux kernel. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality

Platform:
Amazon Linux 2
Product:
kernel
perf
python-perf
Reference:
ALAS2-2020-1520
CVE-2020-14390
CVE-2020-25284
CVE-2020-25643
CVE-2020-25645
CVE    4
CVE-2020-14390
CVE-2020-25645
CVE-2020-25643
CVE-2020-25284
...

© SecPod Technologies