[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-28974":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":33,"duplicate_of":9,"upstream":34,"downstream":35,"duplicates":98,"related":99,"reserved_at":9,"published_at":120,"modified_at":121,"state":122,"summary":123,"references_raw":131,"kevs":169,"epss":170,"epss_history":173,"metrics":437,"affected":448},"CVE-2020-28974","A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[24],{"_key":25,"name":26,"source":27,"url":28,"maturity":29,"reliability_score":30,"verified":31,"type":9,"platforms":32,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_FFBA33467445F544","Exploit Reference (seclists.org)","reference","https://seclists.org/oss-sec/2020/q4/104","unknown",0.2,false,[],[],[],[36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96],{"_key":37},"SUSE-SU-2021:0452-1",{"_key":39},"SUSE-SU-2020:3522-1",{"_key":41},"SUSE-SU-2020:3713-1",{"_key":43},"SUSE-SU-2020:3714-1",{"_key":45},"SUSE-SU-2020:3715-1",{"_key":47},"SUSE-SU-2020:3717-1",{"_key":49},"SUSE-SU-2020:3718-1",{"_key":51},"SUSE-SU-2020:3748-1",{"_key":53},"SUSE-SU-2020:3766-1",{"_key":55},"SUSE-SU-2020:3798-1",{"_key":57},"SUSE-SU-2021:0434-1",{"_key":59},"SUSE-SU-2021:0437-1",{"_key":61},"SUSE-SU-2021:0438-1",{"_key":63},"SUSE-SU-2021:14630-1",{"_key":65},"OPENSUSE-SU-2020:2161-1",{"_key":67},"OPENSUSE-SU-2020:2193-1",{"_key":69},"OPENSUSE-SU-2020:2260-1",{"_key":71},"OPENSUSE-SU-2021:0242-1",{"_key":73},"DLA-2483-1",{"_key":75},"DLA-2494-1",{"_key":77},"MGASA-2021-0030",{"_key":79},"MGASA-2021-0031",{"_key":81},"DEBIAN-CVE-2020-28974",{"_key":83},"RHSA-2021:1578",{"_key":85},"RHSA-2021:1739",{"_key":87},"UBUNTU-CVE-2020-28974",{"_key":89},"USN-4679-1",{"_key":91},"USN-4680-1",{"_key":93},"USN-4681-1",{"_key":95},"USN-4683-1",{"_key":97},"USN-4751-1",[],[100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119],{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":77},{"_key":79},"2020-11-20T17:49:57.000Z","2024-08-04T16:48:01.280Z","Modified",{"cisa_kev":31,"cisa_ransomware":31,"cisa_vendor":9,"epss_severity":124,"epss_score":125,"severity":126,"severity_score":127,"severity_version":128,"severity_source":129,"severity_vector":130,"severity_status":122},"low",0.00059,"medium",6.1,"v2.0","nvd","AV:L/AC:L/Au:N/C:P/I:P/A:C",[132,140,146,151,156,160,164],{"url":133,"sources":134,"tags":136},"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4e0dff2095c579b142d5a0693257f1c58b4804",[135,129],"cve.org",[137,138,139],"X Refsource MISC","Patch","Vendor Advisory",{"url":28,"sources":141,"tags":142},[135,129],[137,143,144,145],"Exploit","Mailing List","Third Party Advisory",{"url":147,"sources":148,"tags":149},"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7",[135,129],[137,150,139],"Release Notes",{"url":152,"sources":153,"tags":154},"http://www.openwall.com/lists/oss-security/2020/11/25/1",[135,129],[144,155,145],"X Refsource MLIST",{"url":157,"sources":158,"tags":159},"https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html",[135,129],[144,155,145],{"url":161,"sources":162,"tags":163},"https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html",[135,129],[144,155,145],{"url":165,"sources":166,"tags":167},"https://security.netapp.com/advisory/ntap-20210108-0003/",[135,129],[168,145],"X Refsource CONFIRM",[],{"date":171,"score":125,"percentile":172},"2026-06-03",0.18733,[174,177,180,183,186,188,191,194,197,200,203,206,208,211,214,218,221,224,226,229,232,235,238,241,244,247,250,253,256,259,262,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,366,369,372,375,378,380,383,386,389,392,395,398,400,403,406,409,412,415,418,420,423,426,429,432,435],{"date":175,"score":125,"percentile":176},"2025-11-04",0.18537,{"date":178,"score":125,"percentile":179},"2025-11-05",0.1855,{"date":181,"score":125,"percentile":182},"2025-11-06",0.18556,{"date":184,"score":125,"percentile":185},"2025-11-07",0.18575,{"date":187,"score":125,"percentile":185},"2025-11-08",{"date":189,"score":125,"percentile":190},"2025-11-09",0.18549,{"date":192,"score":125,"percentile":193},"2025-11-10",0.1851,{"date":195,"score":125,"percentile":196},"2025-11-11",0.18514,{"date":198,"score":125,"percentile":199},"2025-11-12",0.18551,{"date":201,"score":125,"percentile":202},"2025-11-13",0.18582,{"date":204,"score":125,"percentile":205},"2025-11-14",0.18569,{"date":207,"score":125,"percentile":179},"2025-11-15",{"date":209,"score":125,"percentile":210},"2025-11-16",0.18508,{"date":212,"score":125,"percentile":213},"2025-11-17",0.18434,{"date":215,"score":216,"percentile":217},"2025-11-18",0.00051,0.11418,{"date":219,"score":216,"percentile":220},"2025-11-19",0.11435,{"date":222,"score":216,"percentile":223},"2025-11-20",0.11456,{"date":225,"score":125,"percentile":213},"2025-11-21",{"date":227,"score":125,"percentile":228},"2025-11-22",0.18441,{"date":230,"score":125,"percentile":231},"2025-11-23",0.18409,{"date":233,"score":125,"percentile":234},"2025-11-24",0.18373,{"date":236,"score":125,"percentile":237},"2025-11-25",0.18361,{"date":239,"score":125,"percentile":240},"2025-11-26",0.18352,{"date":242,"score":125,"percentile":243},"2025-11-27",0.18355,{"date":245,"score":125,"percentile":246},"2025-11-28",0.18339,{"date":248,"score":125,"percentile":249},"2025-11-29",0.18317,{"date":251,"score":125,"percentile":252},"2025-11-30",0.18323,{"date":254,"score":125,"percentile":255},"2025-12-01",0.18372,{"date":257,"score":125,"percentile":258},"2025-12-02",0.1838,{"date":260,"score":125,"percentile":261},"2025-12-03",0.18392,{"date":263,"score":125,"percentile":243},"2025-12-04",{"date":265,"score":125,"percentile":266},"2025-12-05",0.1841,{"date":268,"score":125,"percentile":269},"2025-12-06",0.18407,{"date":271,"score":125,"percentile":272},"2025-12-07",0.18394,{"date":274,"score":125,"percentile":275},"2025-12-08",0.18411,{"date":277,"score":125,"percentile":278},"2025-12-09",0.18479,{"date":280,"score":125,"percentile":281},"2025-12-10",0.18553,{"date":283,"score":125,"percentile":284},"2025-12-11",0.18596,{"date":286,"score":125,"percentile":287},"2025-12-12",0.1863,{"date":289,"score":125,"percentile":290},"2025-12-13",0.1864,{"date":292,"score":125,"percentile":293},"2025-12-14",0.18589,{"date":295,"score":125,"percentile":296},"2025-12-15",0.18573,{"date":298,"score":125,"percentile":299},"2025-12-16",0.18609,{"date":301,"score":125,"percentile":302},"2025-12-17",0.18696,{"date":304,"score":125,"percentile":305},"2025-12-18",0.18779,{"date":307,"score":125,"percentile":308},"2025-12-19",0.18792,{"date":310,"score":125,"percentile":311},"2025-12-20",0.18766,{"date":313,"score":125,"percentile":314},"2025-12-21",0.18715,{"date":316,"score":125,"percentile":317},"2025-12-22",0.1867,{"date":319,"score":125,"percentile":320},"2025-12-23",0.18675,{"date":322,"score":125,"percentile":323},"2025-12-24",0.18707,{"date":325,"score":125,"percentile":326},"2025-12-25",0.18782,{"date":328,"score":125,"percentile":329},"2025-12-26",0.18783,{"date":331,"score":125,"percentile":332},"2025-12-27",0.18778,{"date":334,"score":125,"percentile":335},"2025-12-28",0.1874,{"date":337,"score":125,"percentile":338},"2025-12-29",0.18701,{"date":340,"score":125,"percentile":341},"2025-12-30",0.1871,{"date":343,"score":125,"percentile":344},"2025-12-31",0.18774,{"date":346,"score":125,"percentile":347},"2026-01-01",0.18871,{"date":349,"score":125,"percentile":350},"2026-01-02",0.18875,{"date":352,"score":125,"percentile":353},"2026-01-03",0.18853,{"date":355,"score":125,"percentile":356},"2026-01-04",0.1875,{"date":358,"score":125,"percentile":359},"2026-01-05",0.18723,{"date":361,"score":125,"percentile":362},"2026-01-06",0.18739,{"date":364,"score":125,"percentile":365},"2026-01-07",0.1877,{"date":367,"score":125,"percentile":368},"2026-01-08",0.1883,{"date":370,"score":125,"percentile":371},"2026-01-09",0.18831,{"date":373,"score":125,"percentile":374},"2026-01-10",0.18839,{"date":376,"score":125,"percentile":377},"2026-01-11",0.18811,{"date":379,"score":125,"percentile":365},"2026-01-12",{"date":381,"score":125,"percentile":382},"2026-01-13",0.18746,{"date":384,"score":125,"percentile":385},"2026-01-14",0.18801,{"date":387,"score":125,"percentile":388},"2026-01-15",0.18806,{"date":390,"score":125,"percentile":391},"2026-01-16",0.18832,{"date":393,"score":125,"percentile":394},"2026-01-17",0.18842,{"date":396,"score":125,"percentile":397},"2026-01-18",0.18775,{"date":399,"score":125,"percentile":314},"2026-01-19",{"date":401,"score":125,"percentile":402},"2026-01-20",0.18699,{"date":404,"score":125,"percentile":405},"2026-01-21",0.18666,{"date":407,"score":125,"percentile":408},"2026-01-22",0.18607,{"date":410,"score":125,"percentile":411},"2026-01-23",0.18702,{"date":413,"score":125,"percentile":414},"2026-01-24",0.18729,{"date":416,"score":125,"percentile":417},"2026-01-25",0.18654,{"date":419,"score":125,"percentile":281},"2026-01-26",{"date":421,"score":125,"percentile":422},"2026-01-27",0.18542,{"date":424,"score":125,"percentile":425},"2026-01-28",0.18547,{"date":427,"score":125,"percentile":428},"2026-01-29",0.18511,{"date":430,"score":125,"percentile":431},"2026-01-30",0.18524,{"date":433,"score":125,"percentile":434},"2026-01-31",0.18533,{"date":436,"score":125,"percentile":199},"2026-02-01",[438],{"source":129,"cvss_v2_0":439,"cvss_v3_0":9,"cvss_v3_1":442,"cvss_v4_0":9},{"baseScore":127,"baseSeverity":9,"vectorString":130,"impactScore":440,"exploitabilityScore":441},8.5,3.9,{"baseScore":443,"baseSeverity":444,"vectorString":445,"impactScore":446,"exploitabilityScore":447},5,"MEDIUM","CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H",7.8,0.8,[449,458],{"ecosystem":9,"name":450,"vendor":451,"product":452,"cpe_part":453,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":454},"debian linux","debian","debian_linux","o",[455],{"version":456,"is_range":31,"range_type":457,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0","cpe",{"ecosystem":9,"name":459,"vendor":460,"product":461,"cpe_part":453,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":462},"linux kernel","linux","linux_kernel",[463],{"version":464,"is_range":465,"range_type":457,"version_start":9,"version_start_type":9,"version_end":466,"version_end_type":467,"fixed_in":9},"lt5.9.7",true,"5.9.7","excluding"]