CVE-2020-13143MEDIUM
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
References
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
https://security.netapp.com/advisory/ntap-20200608-0001/
https://usn.ubuntu.com/4411-1/
https://usn.ubuntu.com/4412-1/
https://usn.ubuntu.com/4413-1/
https://usn.ubuntu.com/4414-1/
https://usn.ubuntu.com/4419-1/
https://www.debian.org/security/2020/dsa-4698
Details
Source: MITRE
Published: 2020-05-18
Updated: 2021-01-04
Type: CWE-125
Risk Information
CVSS v2
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3
Base Score: 6.5
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 2.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 5.6.13 (inclusive)
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 146282 | openSUSE Security Update : RT kernel (openSUSE-2021-242) | Nessus | SuSE Local Security Checks | high |
| 140917 | EulerOS 2.0 SP3 : kernel (EulerOS-SA-2020-2150) | Nessus | Huawei Local Security Checks | medium |
| 140378 | SUSE SLES15 Security Update : kernel (SUSE-SU-2020:2487-1) | Nessus | SuSE Local Security Checks | medium |
| 140328 | EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1958) | Nessus | Huawei Local Security Checks | high |
| 140141 | EulerOS 2.0 SP5 : kernel (EulerOS-SA-2020-1920) | Nessus | Huawei Local Security Checks | medium |
| 139308 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:2105-1) | Nessus | SuSE Local Security Checks | medium |
| 139137 | EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1807) | Nessus | Huawei Local Security Checks | high |
| 138727 | openSUSE Security Update : the Linux Kernel (openSUSE-2020-935) | Nessus | SuSE Local Security Checks | high |
| 138679 | openSUSE Security Update : the Linux Kernel (openSUSE-2020-801) | Nessus | SuSE Local Security Checks | medium |
| 138325 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4419-1) | Nessus | Ubuntu Local Security Checks | medium |
| 138272 | SUSE SLES15 Security Update : kernel (SUSE-SU-2020:1663-1) | Nessus | SuSE Local Security Checks | critical |
| 138139 | Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4414-1) | Nessus | Ubuntu Local Security Checks | high |
| 138138 | Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4413-1) | Nessus | Ubuntu Local Security Checks | medium |
| 138137 | Ubuntu 18.04 LTS / 19.10 : Linux kernel vulnerabilities (USN-4412-1) | Nessus | Ubuntu Local Security Checks | medium |
| 138136 | Ubuntu 20.04 : Linux kernel vulnerabilities (USN-4411-1) | Nessus | Ubuntu Local Security Checks | medium |
| 137932 | EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2020-1713) | Nessus | Huawei Local Security Checks | medium |
| 137805 | EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2020-1698) | Nessus | Huawei Local Security Checks | medium |
| 137617 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1605-1) | Nessus | SuSE Local Security Checks | medium |
| 137616 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1603-1) | Nessus | SuSE Local Security Checks | medium |
| 137615 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1602-1) | Nessus | SuSE Local Security Checks | medium |
| 137613 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:1599-1) | Nessus | SuSE Local Security Checks | medium |
| 137608 | SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1587-1) | Nessus | SuSE Local Security Checks | medium |
| 137516 | EulerOS 2.0 SP2 : kernel (EulerOS-SA-2020-1674) | Nessus | Huawei Local Security Checks | critical |
| 137391 | Slackware 14.2 : Slackware 14.2 kernel (SSA:2020-163-01) | Nessus | Slackware Local Security Checks | medium |
| 137341 | Debian DSA-4699-1 : linux - security update | Nessus | Debian Local Security Checks | medium |
| 137340 | Debian DSA-4698-1 : linux - security update | Nessus | Debian Local Security Checks | medium |
| 137339 | Debian DLA-2242-1 : linux-4.9 security update | Nessus | Debian Local Security Checks | medium |
| 137328 | Photon OS 2.0: Linux PHSA-2020-2.0-0246 | Nessus | PhotonOS Local Security Checks | medium |
| 137323 | Photon OS 1.0: Linux PHSA-2020-1.0-0297 | Nessus | PhotonOS Local Security Checks | medium |
| 137283 | Debian DLA-2241-2 : linux security update | Nessus | Debian Local Security Checks | medium |
| 137190 | Photon OS 3.0: Linux PHSA-2020-3.0-0100 | Nessus | PhotonOS Local Security Checks | medium |