VDB
CVE-2020-24503
CVE-2020-24503
PUBLISHED
CVSS 5.5 MEDIUM
Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access.
EPSS 0.34% · 25.6th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.34%
25.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-hwe-edge | 5.3.0-19.20~18.04.2, 5.0.0-19.20~18.04.1, 5.0.0-17.18~18.04.1 |
| Ubuntu:18.04:LTS | linux-azure-edge | 4.18.0-1007.7~18.04.1, 5.0.0-1012.12~18.04.2, 4.18.0-1008.8~18.04.1 |
| Ubuntu:18.04:LTS | linux-oem | 4.15.0-1002.3, 4.15.0-1004.5, 4.15.0-1006.9 |
| Ubuntu:16.04:LTS | linux-hwe-edge | *, 4.13.0-19.22~16.04.1, 4.11.0-14.20~16.04.1 |
| Ubuntu:18.04:LTS | linux-hwe | *, *, 5.3.0-69.65 |
| Ubuntu:18.04:LTS | linux-oracle-5.0 | *, *, * |
| Ubuntu:Pro:14.04:LTS | linux-azure | 4.15.0-1102.113~14.04.1, 4.15.0-1069.74~14.04.1, 4.15.0-1067.72~14.04.1 |
| Ubuntu:18.04:LTS | linux-gke-4.15 | 4.15.0-1072.76, 4.15.0-1067.70, 4.15.0-1066.69 |
| Ubuntu:18.04:LTS | linux-gcp | 4.15.0-1008.8, 4.15.0-1001.1, 4.15.0-1003.3 |
| Ubuntu:Pro:14.04:LTS | linux-aws | 4.4.0-1113.119, 4.4.0-1118.124, 4.4.0-1119.125 |
| Ubuntu:20.04:LTS | linux-riscv | 5.4.0-37.42, 5.4.0-39.44, 5.4.0-40.45 |
| Ubuntu:20.04:LTS | linux-raspi2 | 0, 5.3.0-1007.8, 5.3.0-1014.16 |
| Ubuntu:18.04:LTS | linux-gcp-edge | 4.18.0-1008.9~18.04.1, 0, 4.18.0-1007.8~18.04.1 |
| Ubuntu:Pro:14.04:LTS | linux | 3.13.0-121.170, 3.13.0-123.172, 3.13.0-125.174 |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | 0, 5.3.0-1009.10~18.04.1, 5.3.0-1010.11~18.04.1 |
| Ubuntu:18.04:LTS | linux-aws-5.3 | 5.3.0-1016.17~18.04.1, 5.3.0-1017.18~18.04.1, 0 |
| Ubuntu:Pro:14.04:LTS | linux-lts-xenial | *, *, * |
| Ubuntu:18.04:LTS | linux-azure-5.3 | *, 5.3.0-1035.36, 5.3.0-1034.35~18.04.1 |
| Ubuntu:18.04:LTS | linux-aws-5.0 | 0, 5.0.0-1027.30, 5.0.0-1023.26~18.04.1 |
| Ubuntu:18.04:LTS | linux-oracle-5.3 | 5.3.0-1018.20~18.04.1, 5.3.0-1016.18~18.04.1, 5.3.0-1014.15~18.04.1 |
…and 1 more
Timeline
- Feb 10, 2021 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Mar 2, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Jul 6, 2022 EPSS Score
- Nov 10, 2022 EPSS Score
- Jan 12, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-24503 third-party-advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-24503 third-party-advisory