How severe is CVE-2020-10781?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.5 out of 10.

What type of vulnerability is CVE-2020-10781?

This is classified as CWE-732, which is a common weakness in software security.

CVE-2020-10781 - MEDIUM Severity | CVSS 5.5

Vulnerability Description

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.

Related Vulnerabilities

CVE-2009-0141

MEDIUM

CVSS:5.5(Medium)

XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user.

CWE-7322009

CVE-2009-1073

MEDIUM

CVSS:5.5(Medium)

nss-ldapd before 0.6.8 uses world-readable permissions for the /etc/nss-ldapd.conf file, which allows local users to obtain a cleartext password for the LDAP server by reading the bindpw field.

CWE-7322009

CVE-2009-3897

MEDIUM

CVSS:5.5(Medium)

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, r...

CWE-7322009

CVE-2012-0433

MEDIUM

CVSS:5.5(Medium)

The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.

CWE-7322012

CVE-2013-0326

MEDIUM

CVSS:5.5(Medium)

OpenStack nova base images permissions are world readable

CWE-7322013

CVE-2014-0068

MEDIUM

CVSS:5.5(Medium)

It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission.

CWE-7322014