CVE-2019-20636

Published: Apr 8, 2020Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.

Affected (23)

Products: Linux: Linux Kernel · Netapp: Cloud Backup, Fas 8300, Fas 8700, Fas A400, Fas Baseboard Management Controller A220, Fas Baseboard Management Controller A320, Fas Baseboard Management Controller A800, Fas Baseboard Management Controller C190, H300s, H410s, H500s, H610c, H610s, H615c, H700s, Solidfire, Steelstore Cloud Integrated Storage

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.16.83
Linux Linux Kernel	From 3.17 to 4.4.210
Linux Linux Kernel	From 4.10 to 4.14.165
Linux Linux Kernel	From 4.15 to 4.19.96
Linux Linux Kernel	From 4.20 to 5.4.12
Linux Linux Kernel	From 4.5 to 4.9.210

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions
Netapp Fas 8300	All versions
Netapp Fas 8700	All versions
Netapp Fas A400	All versions
Netapp Fas Baseboard Management Controller A220	All versions
Netapp Fas Baseboard Management Controller A320	All versions
Netapp Fas Baseboard Management Controller A800	All versions
Netapp Fas Baseboard Management Controller C190	All versions
Netapp H300s	All versions
Netapp H410s	All versions
Netapp H500s	All versions
Netapp H610c	All versions
Netapp H610s	All versions
Netapp H615c	All versions
Netapp H700s	All versions
Netapp Solidfire	All versions
Netapp Steelstore Cloud Integrated Storage	All versions