CVE-2020-27815

June 3, 2021

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Summary:

A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Reference Links(if available):

  • https://www.openwall.com/lists/oss-security/2020/11/30/5,
  • https://www.openwall.com/lists/oss-security/2020/12/28/1,
  • http://www.openwall.com/lists/oss-security/2020/11/30/5
  • https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61b3e4839007668360ed8b87d7da96d2e59fc6c
  • https://www.debian.org/security/2021/dsa-4843

    • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • Tags: , , , ,

    You may have missed

    image

    [FUNKSEC] – Ransomware Victim: asjp[.]cerist[.]dz sell

    December 24, 2024
    image

    [FUNKSEC] – Ransomware Victim: egyptair[.]com 5 sell

    December 24, 2024
    image

    [FUNKSEC] – Ransomware Victim: itc[.]gov[.]ae with 1K !

    December 24, 2024
    CISA_Logo

    CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    December 24, 2024
    CISA_Logo

    CISA: CISA Releases Eight Industrial Control Systems Advisories

    December 24, 2024