CVE Feed

    Dashboard / CVE / CVE-2020-15436

    CVE-2020-15436

    Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

    Published:Jun 8, 2020
    Last Modified:Nov 21, 2024
    EPS:Nov 23, 2020
    EPSS Score:0.00115
    CVSS Score:6.7

    Affected Products

    Vendor
    Broadcom
    Product
    Brocade Fabric Operating System Firmware
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Netapp
    Product
    A250
    Vendor
    Netapp
    Product
    A250 Firmware
    Vendor
    Netapp
    Product
    A700s
    Vendor
    Netapp
    Product
    A700s Firmware
    Vendor
    Netapp
    Product
    Aff 500f
    Vendor
    Netapp
    Product
    Aff 500f Firmware
    Vendor
    Netapp
    Product
    Aff 8300
    Vendor
    Netapp
    Product
    Aff 8300 Firmware
    Vendor
    Netapp
    Product
    Aff 8700
    Vendor
    Netapp
    Product
    Aff 8700 Firmware
    Vendor
    Netapp
    Product
    Aff A400
    Vendor
    Netapp
    Product
    Aff A400 Firmware
    Vendor
    Netapp
    Product
    Cloud Backup
    Vendor
    Netapp
    Product
    Fabric-attached Storage A400
    Vendor
    Netapp
    Product
    Fabric-attached Storage A400 Firmware
    Vendor
    Netapp
    Product
    Fas 500f
    Vendor
    Netapp
    Product
    Fas 500f Firmware
    Vendor
    Netapp
    Product
    Fas 8300
    Vendor
    Netapp
    Product
    Fas 8300 Firmware
    Vendor
    Netapp
    Product
    Fas 8700
    Vendor
    Netapp
    Product
    Fas 8700 Firmware
    Vendor
    Netapp
    Product
    H410c
    Vendor
    Netapp
    Product
    H410c Firmware
    Vendor
    Netapp
    Product
    H610c
    Vendor
    Netapp
    Product
    H610c Firmware
    Vendor
    Netapp
    Product
    H610s
    Vendor
    Netapp
    Product
    H610s Firmware
    Vendor
    Netapp
    Product
    H615c
    Vendor
    Netapp
    Product
    H615c Firmware
    Vendor
    Netapp
    Product
    Solidfire \& Hci Management Node
    Vendor
    Netapp
    Product
    Solidfire Baseboard Management Controller
    Vendor
    Netapp
    Product
    Solidfire Baseboard Management Controller Firmware
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Extras Rt

    Exploits

    https://lkml.org/lkml/2020/6/7/379https://lkml.org/lkml/2020/6/7/379https://github.com/Trinadh465/linux-4.19.72_CVE-2020-15436

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-27538 (CVSS 5.5) — An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously establis…
    CVE-2023-27534 (CVSS 8.8) — A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be …
    CVE-2023-27537 (CVSS 5.9) — A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This s…
    CVE-2021-36160 (CVSS 7.5) — A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (D…
    CVE-2021-40438 (CVSS 9) — A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remot…
    CVE-2021-34798 (CVSS 7.5) — Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2…
    CVE-2021-4197 (CVSS 7.8) — An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem w…
    CVE-2021-28153 (CVSS 5.3) — An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_…
    CVE-2021-27218 (CVSS 7.5) — An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was c…
    CVE-2021-27219 (CVSS 7.5) — An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High