Name: CVE-2020-0429: Use After Free
Creator: Rapid7
Published: 2020-09-17T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-0429, CWE-416, CWE-787, CVSS 6.7, EPSS 0.00019

In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-152735806

CVSS Details

CVSS 3.1 Base Score: 6.7
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux	Jul 30, 2024	Sep 17, 2020
Huawei Euleros 2_0_sp5	—	Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools	Mar 2, 2022	Sep 17, 2020
Oracle_linux	—	Upgrade kernel-uek-develUpgrade kernel-uek-debug-develUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernel-uek-docUpgrade kernel-uek-debug	Sep 9, 2021	Sep 17, 2020
Suse	—	Upgrade kernel-default-extraUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_4_121-92_135-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-azure-baseUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kgraft-patch-4_4_121-92_125-defaultUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kernel-debug-baseUpgrade kgraft-patch-4_4_121-92_141-defaultUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kernel-zfcpdump-manUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-defaultUpgrade kgraft-patch-4_4_180-94_113-defaultUpgrade kernel-default-baseUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-vanilla-baseUpgrade kernel-azureUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-kvmsmall-baseUpgrade kgraft-patch-4_4_121-92_129-defaultUpgrade dlm-kmp-defaultUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kgraft-patch-4_4_121-92_138-defaultUpgrade kernel-vanillaUpgrade kgraft-patch-4_4_180-94_127-default	Dec 11, 2020	Sep 17, 2020
Ubuntu	—	Upgrade linux-kvmUpgrade linux-raspi2Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-lts-xenialUpgrade linux-awsUpgrade linuxUpgrade linux-azureUpgrade linux-azure-fde-5.15Upgrade linux-snapdragonUpgrade linux-hwe	Nov 19, 2024	Sep 17, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business