CVE-2020-27815

Published May 26, 2021

Last updated a year ago

Overview

Description
A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Source
secalert@redhat.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
6.1
Impact score
8.5
Exploitability score
3.9
Vector string
AV:L/AC:L/Au:N/C:P/I:P/A:C

Weaknesses

secalert@redhat.com
CWE-119
nvd@nist.gov
CWE-787

Social media

Hype score
Not currently trending

Configurations