2020-07-29 19:01:29 +00:00
{
"CVE_data_meta" : {
2021-01-13 19:49:57 -05:00
"AKA" : "" ,
"ASSIGNER" : "security@ubuntu.com" ,
"DATE_PUBLIC" : "2020-10-13T16:00:00.000Z" ,
2020-07-29 19:01:29 +00:00
"ID" : "CVE-2020-16119" ,
2021-01-13 19:49:57 -05:00
"STATE" : "PUBLIC" ,
"TITLE" : "DCCP CCID structure use-after-free"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Linux kernel" ,
"version" : {
"version_data" : [
{
"platform" : "" ,
"version_affected" : "<" ,
"version_name" : "5.4 kernel" ,
"version_value" : "5.4.0-51.56"
} ,
{
"platform" : "" ,
"version_affected" : "<" ,
"version_name" : "5.3 kernel" ,
"version_value" : "5.3.0-68.63"
} ,
{
"platform" : "" ,
"version_affected" : "<" ,
"version_name" : "4.15 kernel" ,
"version_value" : "4.15.0-121.123"
} ,
{
"platform" : "" ,
"version_affected" : "<" ,
"version_name" : "4.4 kernel" ,
"version_value" : "4.4.0-193.224"
} ,
{
"platform" : "" ,
"version_affected" : "<" ,
"version_name" : "3.13 kernel" ,
"version_value" : "3.13.0.182.191"
} ,
{
"platform" : "" ,
"version_affected" : "<" ,
"version_name" : "3.2 kernel" ,
"version_value" : "3.2.0-149.196"
}
]
}
}
]
} ,
"vendor_name" : "Canonical"
}
]
}
2020-07-29 19:01:29 +00:00
} ,
2021-01-13 19:49:57 -05:00
"configuration" : [ ] ,
"credit" : [
{
"lang" : "eng" ,
"value" : "Hador Manor"
}
] ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
2020-07-29 19:01:29 +00:00
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2021-01-13 19:49:57 -05:00
"value" : "Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and 3.2.0-149.196."
}
]
} ,
"exploit" : [ ] ,
"generator" : {
"engine" : "Vulnogram 0.0.9"
} ,
"impact" : {
"cvss" : {
"attackComplexity" : "HIGH" ,
"attackVector" : "LOCAL" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 6.3 ,
"baseSeverity" : "MEDIUM" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"scope" : "UNCHANGED" ,
"userInteraction" : "NONE" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" ,
"version" : "3.1"
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-416 Use After Free"
}
]
2020-07-29 19:01:29 +00:00
}
]
2021-01-13 19:49:57 -05:00
} ,
"references" : {
"reference_data" : [
{
"name" : "https://launchpad.net/bugs/1883840" ,
"refsource" : "UBUNTU" ,
"url" : "https://launchpad.net/bugs/1883840"
} ,
{
"name" : "https://ubuntu.com/USN-4576-1" ,
"refsource" : "UBUNTU" ,
"url" : "https://ubuntu.com/USN-4576-1"
} ,
{
"name" : "https://ubuntu.com/USN-4577-1" ,
"refsource" : "UBUNTU" ,
"url" : "https://ubuntu.com/USN-4577-1"
} ,
{
"name" : "https://ubuntu.com/USN-4578-1" ,
"refsource" : "UBUNTU" ,
"url" : "https://ubuntu.com/USN-4578-1"
} ,
{
"name" : "https://ubuntu.com/USN-4579-1" ,
"refsource" : "UBUNTU" ,
"url" : "https://ubuntu.com/USN-4579-1"
} ,
{
"name" : "https://ubuntu.com/USN-4580-1" ,
"refsource" : "UBUNTU" ,
"url" : "https://ubuntu.com/USN-4580-1"
} ,
{
"name" : "https://lore.kernel.org/netdev/20201013171849.236025-1-kleber.souza@canonical.com/T/" ,
"refsource" : "CONFIRM" ,
"url" : "https://lore.kernel.org/netdev/20201013171849.236025-1-kleber.souza@canonical.com/T/"
} ,
{
"name" : "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=01872cb896c76cedeabe93a08456976ab55ad695" ,
"refsource" : "UBUNTU" ,
"url" : "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=01872cb896c76cedeabe93a08456976ab55ad695"
2021-03-04 13:00:48 +00:00
} ,
{
"refsource" : "CONFIRM" ,
"name" : "https://security.netapp.com/advisory/ntap-20210304-0006/" ,
"url" : "https://security.netapp.com/advisory/ntap-20210304-0006/"
2021-09-25 15:00:52 +00:00
} ,
{
"refsource" : "DEBIAN" ,
"name" : "DSA-4978" ,
"url" : "https://www.debian.org/security/2021/dsa-4978"
2021-10-16 01:00:54 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[debian-lts-announce] 20211015 [SECURITY] [DLA 2785-1] linux-4.19 security update" ,
"url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html"
2021-12-17 01:01:05 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update" ,
"url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html"
2021-01-13 19:49:57 -05:00
}
]
} ,
"solution" : [ ] ,
"source" : {
"advisory" : "https://ubuntu.com/USN-4576-1" ,
"defect" : [
"https://launchpad.net/bugs/1883840"
] ,
"discovery" : "USER"
} ,
"work_around" : [ ]
2021-03-04 13:00:48 +00:00
}
