Open mend-bolt-for-github[bot] opened 1 year ago
Apache Software Foundation (ASF)
Library home page: https://mirrors.edge.kernel.org/pub/linux/kernel/v3.0/?wsslib=linux
Found in HEAD commit: 22324ae9738f0a1eeb173ff05137c8317c350189
Found in base branch: master
/drivers/block/rbd.c
The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.
Publish Date: 2020-09-13
URL: CVE-2020-25284
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: High - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: High - Availability Impact: None
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25284
Release Date: 2020-09-13
Fix Resolution: v5.9-rc5
Step up your Open Source Security Game with Mend here
CVE-2020-25284 - Medium Severity Vulnerability
Vulnerable Library - linuxlinux-3.0.40
Apache Software Foundation (ASF)
Library home page: https://mirrors.edge.kernel.org/pub/linux/kernel/v3.0/?wsslib=linux
Found in HEAD commit: 22324ae9738f0a1eeb173ff05137c8317c350189
Found in base branch: master
Vulnerable Source Files (1)
/drivers/block/rbd.c
Vulnerability Details
The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.
Publish Date: 2020-09-13
URL: CVE-2020-25284
CVSS 3 Score Details (4.1)
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: High - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: High - Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25284
Release Date: 2020-09-13
Fix Resolution: v5.9-rc5
Step up your Open Source Security Game with Mend here