Non notée
CVE-2020-14331 A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker…
Description
A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA console to crash the system, potentially escalating their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux kernel | Versions non publiées |
Références
- www.openwall.com www.openwall.com
- lists.openwall.net lists.openwall.net
- bugzilla.redhat.com bugzilla.redhat.com
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2385-1] linux-4.19 security update lists.debian.org
- [debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security update lists.debian.org
- [debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression update lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux kernel
Les 47 CVE de Linux kernel →
CVE-2023-3220
An issue was discovered in the Linux kernel through 6.1-rc8
5.5
Moyenne
CVE-2023-1652
A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel
7.1
Élevée
CVE-2023-1077
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as…
Non notée
CVE-2023-1078
A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol
7.8
Élevée