6.3
Moyenne
CVE-2020-16119 Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an…
Description
Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and 3.2.0-149.196.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux kernel 5.4 | premières → < 5.4.0-51.56 | 5.4.0-51.56 |
| Linux kernel 5.3 | premières → < 5.3.0-68.63 | 5.3.0-68.63 |
| Linux kernel 4.15 | premières → < 4.15.0-121.123 | 4.15.0-121.123 |
| Linux kernel 4.4 | premières → < 4.4.0-193.224 | 4.4.0-193.224 |
| Linux kernel 3.13 | premières → < 3.13.0.182.191 | 3.13.0.182.191 |
| Linux kernel 3.2 | premières → < 3.2.0-149.196 | 3.2.0-149.196 |
Références
- launchpad.net launchpad.net
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- ubuntu.com ubuntu.com
- lore.kernel.org lore.kernel.org
- git.launchpad.net git.launchpad.net
- security.netapp.com security.netapp.com
- DSA-4978 www.debian.org
- [debian-lts-announce] 20211015 [SECURITY] [DLA 2785-1] linux-4.19 security update lists.debian.org
- [debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update lists.debian.org
Chronologie
- Publiée
- Dernière modification