PT-2020-17018

CVE-2020-28575

·

تاريخ النشر

2020-11-24

·

تاريخ التحديث

2020-12-02

الوصف من

CVSS 3.1
6.7
متوسطة
المقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0
Description A heap-based buffer overflow privilege escalation issue may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this issue.
Recommendations For Trend Micro ServerProtect for Linux version 3.0, consider applying security patches or updates to fix the heap-based buffer overflow privilege escalation issue, as no specific workaround is provided in the available information. At the moment, there is no information about a newer version that contains a fix for this issue.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ZDI-20-1378
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾