Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf | Jun 17, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libs | Apr 16, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel | Dec 27, 2019 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade kernel-source | Jan 3, 2020 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 9, 2021 | Nov 27, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-obs-build | Oct 31, 2019 | Oct 30, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-oracle-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-oem-osp1 | Jan 8, 2020 | Oct 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub