CVE-2020-11565

MEDIUM Year: 2020
CVSS v3 Score
6.0
Medium
CVSS v2 Score
3.6
Low
Weakness Type
CWE-787
View all →

Vulnerability Description

An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”

Related Vulnerabilities

CVE-2016-4952

MEDIUM
CVSS:6.0(Medium)

QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vect...

CWE-7872016

CVE-2016-5106

MEDIUM
CVSS:6.0(Medium)

The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of s...

CWE-7872016

CVE-2017-15289

MEDIUM
CVSS:6.0(Medium)

The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors rela...

CWE-7872017

CVE-2018-12181

MEDIUM
CVSS:6.0(Medium)

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.

CWE-7872018

CVE-2020-10742

MEDIUM
CVSS:6.0(Medium)

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc...

CWE-7872020

CVE-2020-27821

MEDIUM
CVSS:6.0(Medium)

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMI...

CWE-7872020