In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perf | Jun 17, 2020 | Apr 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Apr 30, 2021 | Apr 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub