VDB

CVE-2020-27066

CVE-2020-27066 PUBLISHED CVSS 6.699999809265137 MEDIUM

In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168043318

EPSS 0.16% · 5.5th percentile

Risk Scores

CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.16%
5.5th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-gcp5.0.0-1020.20~18.04.1, 4.15.0-1033.35, 4.15.0-1034.36
Ubuntu:18.04:LTSlinux-oracle-5.35.3.0-1030.32~18.04.1, 5.3.0-1028.30~18.04.1, 5.3.0-1016.18~18.04.1
Ubuntu:16.04:LTSlinux-hwe4.15.0-32.35~16.04.1, 0, 4.15.0-91.92~16.04.1
Ubuntu:Pro:14.04:LTSlinux-lts-xenial4.4.0-141.167~14.04.1, 4.4.0-144.170~14.04.1, 4.4.0-146.172~14.04.1
Ubuntu:16.04:LTSlinux-snapdragon4.4.0-1113.118, 4.4.0-1039.43, 4.4.0-1042.46
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-fips0, 4.15.0-1027.32
Ubuntu:18.04:LTSlinux-aws-5.35.3.0-1033.35, 5.3.0-1032.34~18.04.2, 5.3.0-1028.30~18.04.1
Ubuntu:18.04:LTSlinux-oracle-5.05.0.0-1011.16, 5.0.0-1013.18, 5.0.0-1007.12~18.04.1
Ubuntu:18.04:LTSlinux-oem4.15.0-1043.48, 4.15.0-1050.57, 4.15.0-1057.66
Ubuntu:18.04:LTSlinux-aws-5.05.0.0-1021.24~18.04.1, 0, 5.0.0-1027.30
Ubuntu:18.04:LTSlinux-azure-edge5.0.0-1012.12~18.04.2, 0, 4.18.0-1006.6~18.04.1
Ubuntu:18.04:LTSlinux-gcp-5.35.3.0-1018.19~18.04.1, 5.3.0-1016.17~18.04.1, 5.3.0-1014.15~18.04.1
Ubuntu:16.04:LTSlinux-azure4.11.0-1016.16, 4.15.0-1055.60, 4.15.0-1056.61
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1023.24~14.04.1, 4.15.0-1030.31~14.04.1, 4.15.0-1031.32~14.04.1
Ubuntu:18.04:LTSlinux-raspi24.15.0-1024.26, 4.15.0-1022.24, 4.15.0-1038.40
Ubuntu:22.04:LTSlinux-realtime0, 5.15.0-1032.35
Ubuntu:20.04:LTSlinux-raspi25.3.0-1014.16, 5.3.0-1015.17, 5.3.0-1017.19
Ubuntu:18.04:LTSlinux-hwe-edge5.0.0-16.17~18.04.1, 5.3.0-23.25~18.04.1, 0
Ubuntu:16.04:LTSlinux-gcp4.15.0-1041.43, 4.13.0-1015.19, 4.15.0-1060.64
Ubuntu:Pro:FIPS:16.04:LTSlinux-fips4.4.0-1019.24, 4.4.0-1017.22, 0

…and 33 more

Timeline

  • Dec 15, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 1, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Jul 5, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›