Vulnerability CVE-2020-10711


Published: 2020-05-22

Description:
A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.

Type:

CWE-476

(NULL Pointer Dereference)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Redhat -> 3scale 
Redhat -> Openstack 
Redhat -> Virtualization host 
Redhat -> Enterprise linux 
Redhat -> Enterprise linux aus 
Redhat -> Enterprise linux server tus 
Redhat -> Messaging realtime grid 
Linux -> Linux kernel 

 References:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10711
https://www.openwall.com/lists/oss-security/2020/05/12/2

Copyright 2021, cxsecurity.com

 

Back to Top