A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2020/12/08/1 | Mailing List Third Party Advisory |
http://www.openwall.com/lists/oss-security/2020/12/08/4 | Mailing List Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1919900 | Issue Tracking Patch Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html | Mailing List Third Party Advisory |
https://security.netapp.com/advisory/ntap-20210625-0004/ | Third Party Advisory |
https://www.debian.org/security/2021/dsa-4843 | Third Party Advisory |
Configurations
History
07 Sep 2021, 21:59
Type | Values Removed | Values Added |
---|---|---|
References |
|
20 May 2021, 20:12
Type | Values Removed | Values Added |
---|---|---|
References | (DEBIAN) https://www.debian.org/security/2021/dsa-4843 - Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2020/12/08/1 - Mailing List, Third Party Advisory | |
References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1919900 - Issue Tracking, Patch, Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html - Mailing List, Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2020/12/08/4 - Mailing List, Third Party Advisory | |
CWE | CWE-476 | |
CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.5 |
CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
Information
Published : 2021-05-13 15:15
Updated : 2024-02-04 21:47
NVD link : CVE-2020-27830
Mitre link : CVE-2020-27830
CVE.ORG link : CVE-2020-27830
JSON object : View
Products Affected
debian
- debian_linux
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference