CVE-2020-8832

Published: Apr 10, 2020Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.

Affected (34)

Products: Netapp: Cloud Backup, Solidfire & Hci Management Node, Steelstore Cloud Integrated Storage, Aff 8300 Firmware, Aff 8700 Firmware, Aff A220 Firmware, Aff A320 Firmware, Aff A400 Firmware, Aff A700s Firmware, Aff C190 Firmware, H300e Firmware, H300s Firmware, H410c Firmware, H410s Firmware, H500e Firmware, H500s Firmware, H610c Firmware, H610s Firmware, H615c Firmware, H700e Firmware, H700s Firmware, Fas2720 Firmware, Fas2750 Firmware, Fas8300 Firmware, Fas8700 Firmware, Fas Baseboard Management Controller A220 Firmware, Fas Baseboard Management Controller A320 Firmware, Fas Baseboard Management Controller A400 Firmware, Fas Baseboard Management Controller A800 Firmware, Fas Baseboard Management Controller C190 Firmware, Solidfire Baseboard Management Controller Firmware · Canonical: Ubuntu Linux

Netapp

31 products

Cloud Backup

Solidfire & Hci Management Node

Steelstore Cloud Integrated Storage

Fas Baseboard Management Controller A220 Firmware

Fas Baseboard Management Controller A320 Firmware

Fas Baseboard Management Controller A400 Firmware

Fas Baseboard Management Controller A800 Firmware

Fas Baseboard Management Controller C190 Firmware

Solidfire Baseboard Management Controller Firmware

Canonical

1 product

Ubuntu Linux

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions
Netapp Solidfire & Hci Management Node	All versions
Netapp Steelstore Cloud Integrated Storage	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff 8300 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff 8300	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff 8700 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff 8700	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A220 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A220	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A320 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A320	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A400 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A400	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A700s Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A700s	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff C190 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff C190	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300e Firmware	All versions

Running on/with	Platform Versions
Netapp H300e	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500e Firmware	All versions

Running on/with	Platform Versions
Netapp H500e	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H610c Firmware	All versions

Running on/with	Platform Versions
Netapp H610c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H610s Firmware	All versions

Running on/with	Platform Versions
Netapp H610s	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H615c Firmware	All versions

Running on/with	Platform Versions
Netapp H615c	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700e Firmware	All versions

Running on/with	Platform Versions
Netapp H700e	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas2720 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas2720	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas2750 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas2750	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas8300 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas8300	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas8700 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas8700	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas Baseboard Management Controller A220 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas Baseboard Management Controller A220	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas Baseboard Management Controller A320 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas Baseboard Management Controller A320	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas Baseboard Management Controller A400 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas Baseboard Management Controller A400	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas Baseboard Management Controller A800 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas Baseboard Management Controller A800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Fas Baseboard Management Controller C190 Firmware	All versions

Running on/with	Platform Versions
Netapp Fas Baseboard Management Controller C190	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Solidfire Baseboard Management Controller Firmware	All versions

Running on/with	Platform Versions
Netapp Solidfire Baseboard Management Controller	All versions

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840

Source: security@ubuntu.com

Issue TrackingThird Party Advisory

https://security.netapp.com/advisory/ntap-20200430-0004/

Source: security@ubuntu.com

Third Party Advisory

https://usn.ubuntu.com/usn/usn-4302-1

Source: security@ubuntu.com

Third Party Advisory

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862840

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://security.netapp.com/advisory/ntap-20200430-0004/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/usn/usn-4302-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.