CVE-2020-0430

Description

In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-153881554

CVSS Metrics

• v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
• v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.18%• Percentile: 8%

Techniques & Countermeasures

• CWE-125•Out-of-bounds Read

  The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

• debian•linux

  < 4.17.8-1 | < 4.17.8-1 | < 4.17.8-1 | < 4.17.8-1

• ubuntu•linux

  all | < 4.15.0-44.47

• ubuntu•linux-aws

  all | < 4.15.0-1032.34

• ubuntu•linux-aws-5.0

  all

• ubuntu•linux-aws-5.3

  all

• ubuntu•linux-aws-hwe

  < 4.15.0-1032.34~16.04.1

• ubuntu•linux-azure

  all | < 4.15.0-1037.39~16.04.1 | all

• ubuntu•linux-azure-5.3

  all

• ubuntu•linux-azure-edge

  all

• ubuntu•linux-gcp

  < 4.15.0-1027.28~16.04.1 | all

• ubuntu•linux-gcp-5.3

  all

• ubuntu•linux-gcp-edge

  all

• ubuntu•linux-hwe

  < 4.15.0-45.48~16.04.1

• ubuntu•linux-hwe-edge

  all | all

• ubuntu•linux-kvm

  < 4.15.0-1029.29

• ubuntu•linux-lts-xenial

  all

• ubuntu•linux-oem

  < 4.15.0-1033.38

• ubuntu•linux-oracle

  < 4.15.0-1008.10~16.04.1 | < 4.15.0-1008.10

• ubuntu•linux-oracle-5.0

  all

• ubuntu•linux-oracle-5.3

  all

• ubuntu•linux-raspi2

  < 4.15.0-1031.33 | all

• google•android

  na

References (5)

• https://source.android.com/security/bulletin/pixel/2020-09-01
• https://ubuntu.com/security/CVE-2020-0430
• https://git.kernel.org/linus/58990d1ff3f7896ee341030e9a7c2e4002570683
• https://www.cve.org/CVERecord?id=CVE-2020-0430
• https://security-tracker.debian.org/tracker/CVE-2020-0430